Google KFM 跨站脚本漏洞

Google KFM is an ajax file browser and manager from Google, Inc. A security vulnerability exists in Google KFM that stems from a cross-site scripting XSS vulnerability that can be triggered via a crafted GET request to /kfm/index.php...

Masa CMS 路径遍历漏洞

Masa CMS is a digital experience platform from MasaCMS. A security vulnerability exists in Masa CMS version 7.2.1, which stems from a path traversal vulnerability due to a lack of escaping for path parameters in /index.cfm/api/asset/image/...

WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2019-09134)

WUZHI CMS is five fingers WUZHI company based on PHP and MySQL open source content management system CMS. A stored cross-site scripting vulnerability exists in index.php?m=core&f=index in WUZHI CMS 4.1.0, which can be exploited by remote attackers to inject arbitrary web script or HTML...