11680 matches found
CVE-2022-33098
Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting XSS vulnerability via the Edit Contact function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2022-33098
Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting XSS vulnerability via the Edit Contact function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted SVG document, with JavaScript, for a profile picture...
Cross site scripting
Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting XSS vulnerability via the Edit Contact function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2022-33098
CVE-2022-33098 affects Magnolia CMS 6.2.19. The vulnerability is a stored cross-site scripting (XSS) introduced via the Edit Contact function. A user with rights to upload a profile resource can craft an SVG containing malicious JavaScript, which is then executed when others view the resource. Pu...
CVE-2022-33098
Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting XSS vulnerability via the Edit Contact function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted SVG document, with JavaScript, for a profile picture...
CVE-2021-44915
Taocms 3.0.2 was discovered to contain a blind SQL injection vulnerability via the function Edit category...
CVE-2021-44915
Taocms 3.0.2 was discovered to contain a blind SQL injection vulnerability via the function Edit category...
CVE-2021-44915
Taocms 3.0.2 was discovered to contain a blind SQL injection vulnerability via the function Edit category...
Sql injection
Taocms 3.0.2 was discovered to contain a blind SQL injection vulnerability via the function Edit category...
CVE-2021-44915
CVE-2021-44915 affects Taocms 3.0.2 and is described across multiple sources as a blind SQL injection in the Edit category function. The root cause is insufficient validation of externally supplied SQL statements, enabling an attacker to inject SQL via that function. Documents do not provide patc...
CVE-2021-44915
Taocms 3.0.2 was discovered to contain a blind SQL injection vulnerability via the function Edit category...
Taocms SQL注入漏洞
Taocms is a micro Cms Content Management System in China. A SQL injection vulnerability exists in Taocms version 3.0.2. The vulnerability stems from the application's lack of validation of externally entered SQL statements. An attacker can exploit this vulnerability to perform SQL injection via t...
Exploit for Unrestricted Upload of File with Dangerous Type in Pharmacy_Management_System_Project Pharmacy_Management_System
CVE-2022-30887 Pharmacy Management System 1.0 Shell Upload...
PT-2022-6291 · WordPress · Wicked Folders
Name of the Vulnerable Software and Affected Versions: Wicked Folders plugin for WordPress versions up to, and including, 2.18.16 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the ajax edit folder function. This allows...
CVE-2022-32412
An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell...
CVE-2022-32412
An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell...
CVE-2022-32412
An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell...
Code injection
An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell...
CVE-2022-32412
CVE-2022-32412 affects HongCMS v3.0. The issue resides in the "/template/edit" component, described as allowing attackers to get shell access. The available connected sources consistently reference a remote-code-execution/getshell impact via that component, with no publicly disclosed exploit deta...