PT-2024-33049 · Wtcms · Wtcms

Name of the Vulnerable Software and Affected Versions: WTCMS version 1.0 Description: The issue concerns SQL Injection in the edit post method of the /Admin/Controller/NavControl.class.php file via the parentid parameter. This allows for potential exploitation. Recommendations: For WTCMS version...

CVE-2024-48222

Summary: CVE-2024-48222 affects Funadmin v5.0.2 with a SQL injection in the /curd/table/edit endpoint. The vulnerability stems from insufficient input validation, allowing untrusted data to be used directly in SQL queries. Connected sources corroborate a SQL injection risk and indicate potential ...

PT-2024-27780 · Mangoos · Mangoos

Name of the Vulnerable Software and Affected Versions: MangoOS versions prior to 5.2.0 Description: The issue is related to a Client-Side Template Injection CSTI vulnerability. This vulnerability can be exploited via the Platform Management Edit page. Recommendations: For versions prior to 5.2.0,...

MangoOS 安全漏洞

MangoOS is an open source JavaScript object-oriented programming library from Automattic. A security vulnerability exists in MangoOS versions prior to 5.2.0, which stems from a client-side template injection that can be achieved through the platform's administrative edit page...

CVE-2024-37846

MangoOS before 5.2.0 was discovered to contain a Client-Side Template Injection CSTI vulnerability via the Platform Management Edit page...

CVE-2024-48222

Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit...

PT-2024-33032 · Funadmin · Funadmin

Name of the Vulnerable Software and Affected Versions: Funadmin version 5.0.2 Description: The issue is a SQL injection vulnerability located in the /curd/table/edit API endpoint. This allows for potential exploitation by injecting malicious SQL code. Recommendations: For Funadmin version 5.0.2,...

CVE-2024-48222

Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit...

CVE-2024-37846

MangoOS before 5.2.0 was discovered to contain a Client-Side Template Injection CSTI vulnerability via the Platform Management Edit page...

CVE-2024-37846

MangoOS before 5.2.0 is affected by a Client-Side Template Injection (CSTI) vulnerability exposed on the Platform Management Edit page. The issue is tied to the Platform Management Edit page and allows CSTI, with sources indicating that versions prior to 5.2.0 are vulnerable. The connected Red Ha...

FunAdmin 安全漏洞

FunAdmin is FunAdmin open source a lightweight and high-color backend development system based on ThinkPHP6+Layui development. A security vulnerability exists in FunAdmin version 5.0.2, which originates from a SQL injection vulnerability in /curd/table/edit...

PT-2024-33184 · Unknown · Kliqqi-Cms

Name of the Vulnerable Software and Affected Versions: Kliqqi-CMS affected versions not specified Description: The issue allows attackers to execute arbitrary code in the background, potentially leading to the implantation of backdoors or gaining shell access. This is achieved through exploitatio...

CVE-2024-48222

Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit...

CVE-2024-46998

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Edit Email Form Settings Feature. Version 5.1.2 fixes the issue...

CVE-2024-46998 baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Edit Email Form Settings Feature. Version 5.1.2 fixes the issue...

CVE-2024-46998 baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Edit Email Form Settings Feature. Version 5.1.2 fixes the issue...

CVE-2024-46998

CVE-2024-46998 affects baserCMS with a cross-site scripting (XSS) vulnerability in the Edit Email Form Settings feature. Multiple connected sources confirm the issue resides in baserCMS and can permit script execution under certain conditions. The issue is addressed in newer baserCMS releases: up...

GHSA-P3M2-MJ3J-J49X baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature

XSS vulnerability in Edit Email Form Settings Feature to baserCMS. Target baserCMS 5.1.1 and earlier versions Vulnerability Malicious code may be executed in Edit Email Form Settings feature. Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference...

baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature

XSS vulnerability in Edit Email Form Settings Feature to baserCMS. Target baserCMS 5.1.1 and earlier versions Vulnerability Malicious code may be executed in Edit Email Form Settings feature. Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference...

baserCMS 跨站脚本漏洞

baserCMS is an Enterprise Content Management System CMS from the baserCMS team. A cross-site scripting vulnerability exists in baserCMS versions prior to 5.1.2, which stems from a cross-site scripting vulnerability in the Edit Email Form Settings feature...