Cells Blog Cross-Site Scripting Vulnerability (CNVD-2018-00086)

Cells Blog is a free but powerful mini blogging system. A cross-site scripting vulnerability exists in Cells Blog 3.5. An attacker can exploit this vulnerability via the pubreadpost.php fmid parameter to conduct a cross-site scripting attack...

CVE-2017-17949

Cells Blog 3.5 has XSS via the pubreadpost.php fmid parameter...

CVE-2017-17949

CVE-2017-17949 applies to Cells Blog 3.5. The vulnerability is a Cross-Site Scripting (XSS) flaw exploited via the pub_readpost.php fmid parameter. The connected sources confirm XSS in Cells Blog 3.5 and describe the vulnerability vector, without providing a specific patch/version, workarounds, o...

CVE-2017-17949: Improper Neutralization of Input During Web Page Generation

Cells Blog 3.5 has XSS via the pubreadpost.php fmid parameter...

PT-2017-15120

Name of the Vulnerable Software and Affected Versions Cells Blog version 3.5 Description The issue is related to a security problem where an attacker can inject malicious code. The fmid parameter in the "pub readpost.php" endpoint is vulnerable to this type of attack. Recommendations For Cells Bl...

CVE-2009-3185: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote authenticated users to execute arbitrary SQL commands via the fmid parameter in a view action...

Discuz! Plugin Crazy Star 2.0 - fmid SQL Injection

Discuz! Plugin Crazy Star 2.0 - fmid SQL Injection ============================================================ Discuz! Plugin Crazy Star = 2.0 Sql injection Vulnerability ============================================================ ========================Author============================ +...