CVE-2023-27923

Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script...

CVE-2023-27923

Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script...

PT-2023-21422 · Unknown +1 · Vk Blocks Pro +1

Name of the Vulnerable Software and Affected Versions: VK Blocks versions 1.53.0.1 and earlier VK Blocks Pro versions 1.53.0.1 and earlier Description: A cross-site scripting issue in the Tag edit function allows a remote authenticated attacker to inject an arbitrary script. This enables the...

CVE-2023-27923: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script...

CVE-2023-27923

Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script...

CVE-2022-32007

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/company/index.php?view=edit&id=...

Cross site scripting

Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting XSS vulnerability in the Displayname field when using the Add, Edit or Register' functions. This vulnerability allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-23049: Improper Neutralization of Input During Web Page Generation

Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting XSS vulnerability in the Displayname field when using the Add, Edit or Register' functions. This vulnerability allows attackers to execute arbitrary web scripts or HTML...

CVE-2021-42330

The “Teacher Edit” function of ShinHer StudyOnline System does not perform authority control. After logging in with user’s privilege, remote attackers can access and edit other users’ credential and personal information by crafting URL parameters...

CVE-2020-18455

Cross Site Scripting XSS vulnerability exists in bycms v3.0.4 via the title parameter in the edit function in Document.php...

bycms 跨站脚本漏洞

bycms is a simple, easy-to-use content management system. A cross-site scripting vulnerability exists in bycms v3.0.4, which originates from the title parameter in the edit function in Document.php...

CVE-2020-18184

In PluxXml V5.7,the theme edit function /PluXml/core/admin/parametresedittpl.php allows remote attackers to execute arbitrary PHP code by placing this code into a template...

CVE-2020-18184

In PluxXml V5.7,the theme edit function /PluXml/core/admin/parametresedittpl.php allows remote attackers to execute arbitrary PHP code by placing this code into a template...

CVE-2020-18184

In PluxXml V5.7,the theme edit function /PluXml/core/admin/parametresedittpl.php allows remote attackers to execute arbitrary PHP code by placing this code into a template...

CVE-2017-2254: Improper Input Validation

Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via specially crafted input...

CVE-2017-2254

Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via specially crafted input...

Mao10CMS V3.3.0 两处sql注入（官网demo测试）

简要描述： V3.3.0 两处sql注入。 详细说明： 发现mao10 用的是老版本的tp框架，于是乎注入就来了。。 1 /Application/User/Controller/IndexController.class.php public function edit$id=false if!isnumeric$id $id = mcuserid; ; ifisnumeric$id ifmcuserid==$id ifmcremovehtml$POST'title','all' $title =...

Ecmall somewhere SQL secondary injection of the third bomb-vulnerability warning-the black bar safety net

Although in 2 0 1 4 0 6 1 8 The Anti-implantation patch to add the anti-injection code, but still can barely get around. In app/mygoods. app. php function edit $id = empty$GET'id' ? 0 : intval$GET'id'; if ! ISPOST $this-assign'goods', $this-getgoodsinfo$id; / Get categories /...

Ecmall某处SQL二次注入第三弹

简要描述： 20140618 详细说明： 虽然在20140618的防注入补丁添加了防注入代码 但是还是能勉强绕过。 在app/mygoods.app.php中 function edit $id = empty$GET'id' ? 0 : intval$GET'id'; if !ISPOST $this-assign'goods', $this-getgoodsinfo$id; / 取得商品分类 / $this-assign'mgcategories', $this-getmgcategoryoptions0; // 商城分类第一级 $this-assign'sgcategories',...

91736cms cookie injection vulnerability-vulnerability warning-the black bar safety net

Re-read under 9 1 7 3 6 before that getip vulnerability has been patch on. 漏洞 文件 :system/modules/member/index.php public function edit ifempty$COOKIE'memberuser'||empty$COOKIE'memberuserid' showmsgC"adminnotexist","index. php? m=member&f=login"; $userid=$COOKIE'memberuserid';...