CVE-2022-45052

CVE-2022-45052 affects Axiell Iguana CMS. The issue is a Local File Inclusion caused by insufficient neutralisation of user input on the url parameter of the Proxy.type.php endpoint (and related imageProxy.type.php in some sources), enabling external users to access files on the server. Documente...

CVE-2022-45052 Local File Inclusion in Axiell Iguana CMS

A Local File Inclusion vulnerability has been found in Axiell Iguana CMS. Due to insufficient neutralisation of user input on the url parameter on the Proxy.type.php endpoint, external users are capable of accessing files on the server...

Axiell Iguana CMS 安全漏洞

Axiell Iguana CMS is a control-based platform from Axiell Inc. for personalizing and communicating with customers. Axiell Iguana CMS has a security vulnerability that originates from an input error in the url parameter on imageProxy.type.php. An attacker exploiting the vulnerability is able to...

PT-2023-14579 · Axiell · Axiell Iguana Cms

Name of the Vulnerable Software and Affected Versions: Axiell Iguana CMS affected versions not specified Description: A reflected XSS issue has been found, allowing an attacker to execute code in a victim's browser. The module parameter on the "Service.template.cls" endpoint does not properly...

PT-2023-14578 · Axiell · Axiell Iguana Cms

Name of the Vulnerable Software and Affected Versions: Axiell Iguana CMS affected versions not specified Description: A reflected XSS issue has been found, allowing an attacker to execute code in a victim's browser. The url parameter on the "novelist.php" endpoint does not properly neutralize use...

PT-2023-14580 · Axiell · Axiell Iguana Cms

Name of the Vulnerable Software and Affected Versions: Axiell Iguana CMS affected versions not specified Description: A Local File Inclusion issue has been found in Axiell Iguana CMS. The problem arises from insufficient neutralisation of user input on the url parameter in the "Proxy.type.php" an...

Axiell Iguana CMS 跨站脚本漏洞

Axiell Iguana CMS is a control-based platform from Axiell Inc. for personalizing and communicating with customers. Axiell Iguana CMS suffers from a security vulnerability that originates from an error in the module parameter of Service.template.cls, which can be exploited by an attacker to execut...

CVE-2022-45050

A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's browser. The title parameter on the twitter.php endpoint does not properly neutralise user input, resulting in the vulnerability...

CVE-2022-45050

A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's browser. The title parameter on the twitter.php endpoint does not properly neutralise user input, resulting in the vulnerability...

Cross site scripting

A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's browser. The title parameter on the twitter.php endpoint does not properly neutralise user input, resulting in the vulnerability...

CVE-2022-45050 Reflected XSS in Axiell Iguana CMS

A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's browser. The title parameter on the twitter.php endpoint does not properly neutralise user input, resulting in the vulnerability...

CVE-2022-45050 Reflected XSS in Axiell Iguana CMS

A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's browser. The title parameter on the twitter.php endpoint does not properly neutralise user input, resulting in the vulnerability...

CVE-2022-45050

Axiell Iguana CMS is affected by CVE-2022-45050 (reflected XSS) where the title parameter in twitter.php does not properly neutralise input, enabling code execution in a victim’s browser. Affected component: twitter.php on Axiell Iguana CMS; vulnerability arises from insufficient input neutralisa...

Axiell Iguana CMS 跨站脚本漏洞

Axiell Iguana CMS is a control-based platform from Axiell Inc. for personalizing and communicating with customers. Axiell Iguana CMS has a security vulnerability that stems from the title parameter in twitter.php not properly neutralizing user input. An attacker exploited the vulnerability to...

PT-2022-27393 · Axiell · Axiell Iguana Cms

Name of the Vulnerable Software and Affected Versions: Axiell Iguana CMS affected versions not specified Description: A reflected XSS issue has been found, allowing an attacker to execute code in a victim's browser. The title parameter on the "twitter.php" endpoint does not properly neutralize us...