13403 matches found
PT-2021-10645
Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: The issue allows attackers to list files in arbitrary directories via the dir parameter in the coreframe/app/template/admin/index.php file. This is a directory traversal issue that can be exploited by...
CVE-2021-28245
PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter that can reveal sensitive information through adding an admin account...
CVE-2021-28245
PbootCMS 3.0.4 contains a SQL injection vulnerability in index.php via the search parameter that can be exploited to add an administrator account and reveal sensitive information. This CVE (CVE-2021-28245) is documented across multiple feeds (NVD, Red Hat, CNVD, CVE lists) with consistent descrip...
CVE-2021-28245: Improper Neutralization of Special Elements used in an SQL Command
PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter that can reveal sensitive information through adding an admin account...
PT-2021-17830
Name of the Vulnerable Software and Affected Versions: PbootCMS version 3.0.4 Description: The issue allows for SQL injection through the search parameter in index.php, potentially revealing sensitive information and enabling the addition of an admin account. Recommendations: For PbootCMS version...
CVE-2021-29343: Improper Neutralization of Special Elements used in an SQL Command
Ovidentia CMS 6.x contains a SQL injection vulnerability in the "id" parameter of index.php. The "checkbox" property into "text" data can be extracted and displayed in the text region or in source code...
PT-2021-18175
Name of the Vulnerable Software and Affected Versions: Ovidentia CMS versions 6.x Description: The issue concerns a SQL injection vulnerability. Specifically, it affects the id parameter of the "index.php" endpoint. An attacker can extract and display the checkbox property from text data in eithe...
CVE-2021-29027
A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/index.php URI...
CVE-2021-29027
A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/index.php URI...
CVE-2021-29030: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/index.php URI...
CVE-2021-29027: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/index.php URI...
PT-2021-18031
Name of the Vulnerable Software and Affected Versions: Bitweaver version 3.1.0 Description: A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the "/users/index.php" API endpoint. This enables attackers to execute malicious scripts on the client-side. Recommendation...
PT-2021-18034
Name of the Vulnerable Software and Affected Versions: Bitweaver version 3.1.0 Description: A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the "/users/admin/index.php" API endpoint. This enables attackers to execute malicious scripts on the client-side...
PT-2021-17498
Name of the Vulnerable Software and Affected Versions DynPG version 4.9.2 Description A cross-site scripting XSS issue allows a remote attacker to inject javascript via the URI in the "/index.php" API endpoint. This can be exploited by manipulating the javascript code injected into the URI...
CVE-2021-27530: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allow remote attacker to inject javascript via URI in /index.php...
CVE-2021-27519
A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter...
CVE-2021-27520
A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter...
Cross site scripting
A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter...
