142 matches found
CVE-2021-45843: Improper Neutralization of Input During Web Page Generation
glFusion CMS v1.7.9 is affected by a reflected Cross Site Scripting XSS vulnerability. The value of the title request parameter is copied into the value of an HTML tag attribute which is encapsulated in double quotation marks. This input was echoed unmodified in the application's response...
PT-2021-24304 · Unknown · Glfusion Cms
Name of the Vulnerable Software and Affected Versions: glFusion CMS version 1.7.9 Description: The issue concerns a reflected Cross Site Scripting XSS vulnerability. Specifically, the value of the title request parameter is copied into an HTML tag attribute encapsulated in double quotation marks...
GlFusion Cms Arbitrary User Registration Vulnerability
glFusion CMS is a content management and publishing system. glFusion CMS v1.7.9 is vulnerable to arbitrary user registration, which can be exploited by attackers to register using any user's email address...
GlFusion Cms Access Control Error Vulnerability
glFusion CMS is a content management and publishing system. glFusion CMS v1.7.9 is vulnerable to an access control error, which can be exploited by attackers via /publichtml/comment.php...
glFusion CMS Licensing Issue Vulnerability
GlFusion Cms is a content management and publishing system. glFusion CMS v1.7.9 is vulnerable to an authorization issue, which can be exploited by attackers via /publichtml/users.php...
CVE-2021-44942
glFusion CMS 1.7.9 is affected by a Cross Site Request Forgery CSRF vulnerability in /publichtml/admin/plugins/badbehavior2/blacklist.php. Using the CSRF vulnerability to trick the administrator to click, an attacker can add a blacklist...
CVE-2021-44942
glFusion CMS 1.7.9 is affected by a Cross Site Request Forgery CSRF vulnerability in /publichtml/admin/plugins/badbehavior2/blacklist.php. Using the CSRF vulnerability to trick the administrator to click, an attacker can add a blacklist...
CVE-2021-44942
glFusion CMS 1.7.9 is affected by a Cross Site Request Forgery CSRF vulnerability in /publichtml/admin/plugins/badbehavior2/blacklist.php. Using the CSRF vulnerability to trick the administrator to click, an attacker can add a blacklist...
Cross site request forgery (csrf)
glFusion CMS 1.7.9 is affected by a Cross Site Request Forgery CSRF vulnerability in /publichtml/admin/plugins/badbehavior2/blacklist.php. Using the CSRF vulnerability to trick the administrator to click, an attacker can add a blacklist...
CVE-2021-44942
glFusion CMS 1.7.9 is affected by a Cross Site Request Forgery CSRF vulnerability in /publichtml/admin/plugins/badbehavior2/blacklist.php. Using the CSRF vulnerability to trick the administrator to click, an attacker can add a blacklist...
CVE-2021-44942
CVE-2021-44942 affects glFusion CMS 1.7.9. The vulnerability is a Cross Site Request Forgery (CSRF) in /public_html/admin/plugins/bad_behavior2/blacklist.php that can be triggered to add entries to a blacklist when an administrator is prompted to click a link. The provided sources consistently de...
CVE-2021-44942
glFusion CMS 1.7.9 is affected by a Cross Site Request Forgery CSRF vulnerability in /publichtml/admin/plugins/badbehavior2/blacklist.php. Using the CSRF vulnerability to trick the administrator to click, an attacker can add a blacklist...
CVE-2021-44949
glFusion CMS 1.7.9 is affected by an access control vulnerability via /publichtml/users.php...
CVE-2021-44949
glFusion CMS 1.7.9 is affected by an access control vulnerability via /publichtml/users.php...
CVE-2021-44949
glFusion CMS 1.7.9 is affected by an access control vulnerability via /publichtml/users.php...
Improper access control
glFusion CMS 1.7.9 is affected by an access control vulnerability via /publichtml/users.php...
CVE-2021-44949
glFusion CMS 1.7.9 is affected by an access control vulnerability via /publichtml/users.php...
CVE-2021-44949
CVE-2021-44949 affects glFusion CMS 1.7.9, with an access control/authorization vulnerability exploitable via /public_html/users.php. Multiple sources (NVD, CNVD, CNNVD, OSV, CVE list, CNVD) describe it as an authorization issue; exploitation status is not provided in the documents. PT-2021-24185...