Unrestricted-File-Upload-on-SiteMagic-CMS-4.4.2

Unrestricted File Upload on SiteMagic CMS 4.4.2 This repo describe how to exploit unrestricted file upload vulnerability on SiteMagic CMS 4.4.2 About SiteMagic CMS 4.4.2 Website: https://sitemagic.org/ Download: https://sitemagic.org/Download.html PoC - Exploiting unrestricted file upload...

CVE-2019-10238

Sitemagic CMS v4.4 has XSS in SMFiles/FrmUpload.class.php via the filename parameter...

CVE-2019-10238

CVE-2019-10238 concerns Sitemagic CMS v4.4, where an XSS flaw exists in SMFiles/FrmUpload.class.php through the filename parameter. The vulnerability description across connected sources consistently identifies a cross-site scripting issue exploitable via the filename field in FrmUpload.class.php...