171 matches found
CVE-2020-23049
Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting XSS vulnerability in the Displayname field when using the Add, Edit or Register' functions. This vulnerability allows attackers to execute arbitrary web scripts or HTML...
EUVD-2015-1602
Malware in sbrugna...
EUVD-2021-2142
Malware in sbrugna...
EUVD-2012-5087
Malware in sbrugna...
EUVD-2021-1287
Malware in sbrugna...
EUVD-2014-9289
Malware in sbrugna...
EUVD-2021-2001
Malware in sbrugna...
EUVD-2018-9343
Malware in sbrugna...
EUVD-2012-1235
Malware in sbrugna...
EUVD-2022-3172
Malicious code in bioql PyPI...
EUVD-2022-1211
Malicious code in bioql PyPI...
EUVD-2022-2467
Malicious code in bioql PyPI...
EUVD-2022-5269
Malicious code in bioql PyPI...
EUVD-2022-5767
Malicious code in bioql PyPI...
EUVD-2022-2019
Malicious code in bioql PyPI...
CVE-2021-28931
Arbitrary file upload vulnerability in Fork CMS 5.9.2 allows attackers to create or replace arbitrary files in the /themes directory via a crafted zip file uploaded to the Themes panel...
CVE-2019-15521
Spoon Library through 2014-02-06, as used in Fork CMS before 1.4.1 and other products, allows PHP object injection via a cookie containing an object...
CVE-2018-5215
Fork CMS 5.0.7 has XSS in /private/en/pages/edit via the title parameter...
CVE-2012-1208
Multiple cross-site scripting XSS vulnerabilities in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allow remote attackers to inject arbitrary web script or HTML via the 1 report parameter to blog/settings or 2 error parameter to users/index...
PT-2022-22911 · Fork Cms · Fork Cms
Name of the Vulnerable Software and Affected Versions: ForkCMS versions prior to 5.11.0 Description: A stored cross-site scripting XSS issue allows remote attackers to inject JavaScript via the start date Parameter. This issue was patched in version 5.11.0. Recommendations: For ForkCMS versions...