CVE-2023-45878

Gibbon CMS CVE-2023-45878 漏洞利用工具 此 Python 脚本用于利用 CVE-2023-45878，该漏洞存在于 Gibbon CMS 25.0.1 及更早版本中，是一个未经验证的任意文件上传漏洞，可导致远程代码执行（RCE）。 漏洞描述 CVE-2023-45878 存在于 Gibbon CMS 的 rubricsvisualisesaveAjax.php 端点中。该端点由于不需要身份验证且允许任意文件写入而存在漏洞。 该漏洞源于以下原因： 未经验证的访问： modules/Rubrics/rubricsvisualisesaveAjax.php...

CVE-2022-23871

Multiple cross-site scripting XSS vulnerabilities in the component outcomesaddProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters...

EUVD-2022-28796

Malicious code in bioql PyPI...

EUVD-2022-28005

Malicious code in bioql PyPI...

CVE-2025-26211

Gibbon before 29.0.00 allows CSRF...

CVE-2022-22868

Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting XSS vulnerability, that allows attackers to inject arbitrary script via name parameters...

Exploit for Out-of-bounds Write in Gibbonedu Gibbon

Gibbon CMS CVE-2023-45878 Exploit This Python script exploi...

CVE-2022-23871

Multiple cross-site scripting XSS vulnerabilities in the component outcomesaddProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the component outcomesaddProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters...

CVE-2022-23871

Multiple cross-site scripting XSS vulnerabilities in the component outcomesaddProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters...

CVE-2022-23871

CVE-2022-23871 affects Gibbon CMS v22.0.01, with XSS in the outcomes_addProcess.php component. The root cause is insufficient validation of client-supplied input in the name, category, and description fields, enabling attackers to inject arbitrary web scripts or HTML in a user’s browser. Multiple...

CVE-2022-23871

Multiple cross-site scripting XSS vulnerabilities in the component outcomesaddProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters...

CVE-2022-23871: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the component outcomesaddProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters...

CVE-2022-22868

Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting XSS vulnerability, that allows attackers to inject arbitrary script via name parameters...

Cross site scripting

Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting XSS vulnerability, that allows attackers to inject arbitrary script via name parameters...

CVE-2022-22868

CVE-2022-22868 refers to an XSS vulnerability in Gibbon CMS v22.0.01 where an attacker can inject arbitrary script via the name parameter. The issue is documented across multiple sources (NVD, Red Hat, osv.dev, CVE List, PRION, CNNVD). The connected documents do not provide a patch version or rem...

CVE-2022-22868

Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting XSS vulnerability, that allows attackers to inject arbitrary script via name parameters...

CVE-2022-22868

Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting XSS vulnerability, that allows attackers to inject arbitrary script via name parameters...

CVE-2022-22868: Improper Neutralization of Input During Web Page Generation

Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting XSS vulnerability, that allows attackers to inject arbitrary script via name parameters...