424 matches found
FlatPress v1.3 - Remote Command Execution Exploit
Exploit Title: FlatPress v1.3 - Remote Command Execution Discovered by: Ahmet Ümit BAYRAM Vendor Homepage: https://www.flatpress.org Software Link: https://github.com/flatpressblog/flatpress/archive/1.3.zip Tested Version: 1.3 latest Tested on: MacOS import requests import time import random impo...
FlatPress v1.3 - Remote Command Execution
Exploit Title: FlatPress v1.3 - Remote Command Execution Discovered by: Ahmet Ümit BAYRAM Discovered Date: 19.04.2024 Vendor Homepage: https://www.flatpress.org Software Link: https://github.com/flatpressblog/flatpress/archive/1.3.zip Tested Version: 1.3 latest Tested on: MacOS import requests...
FlatPress 1.3 Shell Upload
Exploit Title: FlatPress v1.3 - Remote Command Execution Discovered by: Ahmet Ümit BAYRAM Discovered Date: 19.04.2024 Vendor Homepage: https://www.flatpress.org Software Link: https://github.com/flatpressblog/flatpress/archive/1.3.zip Tested Version: 1.3 latest Tested on: MacOS import requests...
CVE-2023-1148
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
Cross site scripting
Cross-site Scripting XSS - Generic in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1107
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1106
Cross-site Scripting XSS - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3...
FlatPress 跨站脚本漏洞
FlatPress is a Php-based blog builder without database support from the FlatPress community. A cross-site scripting vulnerability exists in FlatPress versions prior to 1.3, which stems from not properly cleaning data entries, allowing the insertion of HTML or JavaScript code...
FlatPress 跨站脚本漏洞
FlatPress is a Php-based blog builder without database support from the FlatPress community. A cross-site scripting vulnerability exists in FlatPress versions prior to 1.3, which can be exploited by an attacker to steal a user's cookie...
PT-2023-16780 · Flatpress · Flatpress
Name of the Vulnerable Software and Affected Versions: flatpress versions prior to 1.3 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository flatpressblog/flatpress. Recommendations: For versions prior to 1.3, update to version 1.3 or later to...
PT-2023-16781 · Flatpress · Flatpress
Name of the Vulnerable Software and Affected Versions: flatpress versions prior to 1.3 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository flatpressblog/flatpress. Recommendations: For versions prior to 1.3, update to version 1.3 or later to...
PT-2023-16759 · Flatpress · Flatpress
Name of the Vulnerable Software and Affected Versions: flatpress versions prior to 1.3 Description: The issue is related to Cross-site Scripting XSS - Reflected, which occurs when an application includes user input in its responses without proper validation, allowing an attacker to inject malicio...
CVE-2023-1107 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1107: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1148: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1148 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1107
CVE-2023-1107 is a stored Cross-site Scripting (XSS) vulnerability affecting FlatPress before version 1.3, documented as occurring in stored user input in flatpressblog/flatpress. Multiple sources (NVD/Red Hat/CNNVD/OSV) consistently describe a stored XSS issue in FlatPress prior to 1.3. Some con...