CVE-2023-44758_GDidees-CMS-Stored-XSS---Title

GDidees 保存型XSS v3.0 作者: Sergio 説明: GDidees v.3.0のクロスサイトスクリプティング脆弱性により、ローカル攻撃者がページタイトルに細工されたスクリプトを介して任意のコードを実行できます。 攻撃ベクトル: スクリプティング - ページタイトル内の入力のサニタイズにおける脆弱性により、ユーザーがWebページにアクセスしたときに実行されるJavaScriptコードを注入できます。 概念実証 POC: 「Outils d'édition」を編集すると、「Titre de la page」に任意のJavaScriptコードを注入できることがわかります。...

EUVD-2023-30958

Malicious code in bioql PyPI...

CVE-2024-46101

GDidees CMS = v3.9.1 has a file upload vulnerability...

CVE-2023-44758

GDidees CMS 3.0 is affected by a Cross-Site Scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload to the Page Title...

CVE-2023-27179

GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /admin/imgdownload.php...

CVE-2023-27178

An arbitrary file upload vulnerability in the upload function of GDidees CMS 3.9.1 allows attackers to execute arbitrary code via a crafted file...

CVE-2023-27180

GDidees CMS v3.9.1 was discovered to contain a source code disclosure vulnerability by the backup feature which is accessible via /admin/backup.php...

CVE-2024-46101

GDidees CMS = v3.9.1 has a file upload vulnerability...

CVE-2024-46101

GDidees CMS = v3.9.1 has a file upload vulnerability...

CVE-2024-46101

GDidees CMS = v3.9.1 has a file upload vulnerability...

CVE-2024-46101

GDidees CMS = v3.9.1 has a file upload vulnerability...

GDidees CMS 安全漏洞

GDidees CMS is a website builder system from GDidees. A security vulnerability exists in GDidees CMS version 3.9.1 and earlier, which stems from the presence of a file upload vulnerability...

CVE-2024-46101

GDidees CMS, a website builder system, is vulnerable to a file upload vulnerability in versions 3.9.1 and earlier . This flaw allows for the unrestricted upload of files with dangerous types , which could lead to significant security breaches. To remediate this issue, users should update to a ver...

PT-2024-31909 · Unknown · Gdidees Cms

Name of the Vulnerable Software and Affected Versions: GDidees CMS versions 3.9.1 and earlier Description: A file upload vulnerability exists in the software. This issue allows for malicious file uploads, potentially leading to security breaches. Recommendations: For versions 3.9.1 and earlier,...

CVE-2024-46101: Unrestricted Upload of File with Dangerous Type

GDidees CMS = v3.9.1 has a file upload vulnerability...

CVE-2023-44758

GDidees CMS 3.0 is affected by a Cross-Site Scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload to the Page Title...

CVE-2023-44758: Improper Neutralization of Input During Web Page Generation

GDidees CMS 3.0 is affected by a Cross-Site Scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload to the Page Title...

CVE-2023-44758

GDidees CMS 3.0 is affected by a Cross-Site Scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload to the Page Title...

CVE-2023-44758

GDidees CMS 3.0 is affected by a Cross-Site Scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload to the Page Title...

PT-2023-29282 · Unknown · Gdidees Cms

Name of the Vulnerable Software and Affected Versions: GDidees CMS version 3.0 Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload to the Page Title. This enables attackers to inject malicious scripts into the...