13400 matches found
PT-2021-23011
Name of the Vulnerable Software and Affected Versions bugs versions 1.8 and below Description The issue allows remote attackers to inject arbitrary web script or HTML via the email parameter in the install/index.php file. This enables attackers to perform cross-site scripting XSS attacks...
PT-2021-23016
Name of the Vulnerable Software and Affected Versions FlexTV beta development version Description The issue is related to a cross-site scripting XSS vulnerability in the index.php file of FlexTV. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the PHP SELF...
PT-2021-23012
Name of the Vulnerable Software and Affected Versions bugs versions 1.8 and below Description The issue is a cross-site scripting XSS vulnerability in the install/index.php file. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the first name parameter...
CVE-2021-40922: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the lastname parameter...
PT-2021-23010
Name of the Vulnerable Software and Affected Versions bugs versions 1.8 and below Description The issue is a cross-site scripting XSS vulnerability in the install/index.php file. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the last name parameter...
UCMS 跨站脚本漏洞
UCMS is a content management system written in PHP. A security vulnerability exists in UCMS, which originates from a stored cross-site scripting XSS vulnerability in ucms index.php. An attacker can exploit this vulnerability to execute client-side code...
PT-2021-10542
Name of the Vulnerable Software and Affected Versions: UCMS version 1.4.7 Description: A stored cross-site scripting XSS issue in the "/ucms/index.php?do=list edit" endpoint of UCMS allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, descriptio...
CVE-2020-20781: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in /ucms/index.php?do=listedit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, description or content text fields...
CVE-2020-20124
Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...
CVE-2020-20124
Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...
CVE-2020-20124
Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...
CVE-2020-20124
Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...
CVE-2020-20124: Improper Control of Generation of Code
Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...
WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2023-17601)
WUZHI CMS is a PHP and MySQL based Content Management System CMS from Beijing WuZHI Technology Co. The vulnerability can be exploited by remote attackers to perform cross-site scripting attacks via the "email username" parameter in "index.php"...
CVE-2020-19915
Cross Site Scripting XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php...
CVE-2020-19915
Cross Site Scripting XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php...
Cross site scripting
Cross Site Scripting XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php...
CVE-2020-19915
The CVE-2020-19915 is a Cross-Site Scripting (XSS) vulnerability in WUZHI CMS 4.1.0, exploitable via the mailbox/email username parameter in index.php. Multiple connected sources corroborate the affected product/version and the input vector, describing remote XSS through that parameter. The docum...