CVE-2020-23697

Cross Site Scripting vulnerabilty in Monstra CMS 3.0.4 via the page feature in admin/index.php...

Cross site scripting

A stored cross site scripting XSS vulnerability in index.php?menu=billingrates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Name" or "Prefix" fields under the "Create New Rate" module...

CVE-2020-23697: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerabilty in Monstra CMS 3.0.4 via the page feature in admin/index.php...

PT-2021-10928

Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4 Description The issue is related to a Cross Site Scripting vulnerability in the page feature of admin/index.php. This vulnerability can be exploited via the page feature. Recommendations For Monstra CMS version 3.0.4,...

CVE-2021-34190: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in index.php?menu=billingrates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Name" or "Prefix" fields under the "Create New Rate" module...

CVE-2020-18646

Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/public/index.php"...

CVE-2020-18646: Exposure of Resource to Wrong Sphere

Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/public/index.php"...

CVE-2020-18648: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF in JuQingCMS v1.0 allows remote attackers to gain local privileges via the component "JuQingCMSv1.0/admin/index.php?c=administrator&a=add"...

PT-2021-10192

Name of the Vulnerable Software and Affected Versions: NoneCMS version 1.3 Description: The issue allows remote attackers to obtain sensitive information. This is achieved via the component "/public/index.php". Recommendations: For NoneCMS version 1.3, consider restricting access to the...

CVE-2020-19511

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

CVE-2020-19511

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

Cross site scripting

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

CVE-2020-19511

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

CVE-2020-19511

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

CVE-2020-19511

CVE-2020-19511 affects Typesetter 5.1. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the index.php/Admin/Classes interface, specifically through the className and Description fields. Descriptions across multiple connected sources confirm the editable fields in the admin U...

CVE-2020-19511: Improper Neutralization of Input During Web Page Generation

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

PT-2021-3388

Name of the Vulnerable Software and Affected Versions Typesetter version 5.1 Description The issue is related to a Cross Site Scripting vulnerability. It is associated with the failure to take measures to protect the structure of web pages, specifically through the className and Description field...

PT-2021-3361

Name of the Vulnerable Software and Affected Versions LaikeTui version 3.5.0 Description The issue allows remote authenticated users to execute arbitrary PHP code by uploading a ZIP archive containing a .php file. This can be achieved by using the "index.php?module=system&action=pay" endpoint to...

CVE-2021-34128: Unrestricted Upload of File with Dangerous Type

LaikeTui 3.5.0 allows remote authenticated users to execute arbitrary PHP code by using index.php?module=system&action=pay to upload a ZIP archive containing a .php file, as demonstrated by the ../../../../phpinfo.php pathname...

PT-2021-4036

Name of the Vulnerable Software and Affected Versions Chikitsa Patient Management System version 2.0.0 Description The issue is related to the index.php/appointment/todos endpoint in the Chikitsa Patient Management System, which allows for XSS attacks. This is due to the lack of protection measur...