13423 matches found
PT-2018-14768
Name of the Vulnerable Software and Affected Versions MetInfo version 6.1.3 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs via the langset parameter in the "admin/index.php?a=dogetpassword" endpoint. Recommendations For MetInfo version 6.1.3, update the software...
CVE-2018-19051: Improper Neutralization of Input During Web Page Generation
MetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword abttype parameter...
CVE-2018-18938
An issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via an ontoggle attribute to details/open/ within a second input field...
CVE-2018-18939
An issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via a seventh input field...
CVE-2018-18939
An issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via a seventh input field...
Cross site scripting
An issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via an ontoggle attribute to details/open/ within a second input field...
CVE-2018-18939
An issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via a seventh input field...
PT-2018-14735
Name of the Vulnerable Software and Affected Versions WUZHI CMS version 4.1.0 Description A stored XSS issue was discovered in the index.php file, specifically via the seventh input field when accessing the core index module, at the endpoint "index.php?m=core&f=index". Recommendations For WUZHI C...
CVE-2018-18939: Improper Neutralization of Input During Web Page Generation
An issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via a seventh input field...
CVE-2018-18938: Improper Neutralization of Input During Web Page Generation
An issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via an ontoggle attribute to details/open/ within a second input field...
PT-2018-14734
Name of the Vulnerable Software and Affected Versions WUZHI CMS version 4.1.0 Description An issue was discovered in WUZHI CMS, where there is stored XSS in "index.php?m=core&f=index" via an ontoggle attribute to details/open/ within a second input field. Recommendations For WUZHI CMS version...
PT-2018-14707
Name of the Vulnerable Software and Affected Versions nc-cms versions prior to 2017-03-10 Description The issue allows remote attackers to execute arbitrary PHP code via the "Upload File or Image" feature. This can be achieved by uploading a file with a .php filename and setting the Content-Type ...
CVE-2018-18874: Unrestricted Upload of File with Dangerous Type
nc-cms through 2017-03-10 allows remote attackers to execute arbitrary PHP code via the "Upload File or Image" feature, with a .php filename and "Content-Type: application/octet-stream" to the index.php?action=filemanagerupload URI...
CVE-2018-18724
An XSS issue was discovered in index.php/admin/category/editcategory?id=73 in YUNUCMS 1.1.5...
CVE-2018-18720
An XSS issue was discovered in index.php/admin/system/basic in YUNUCMS 1.1.5...
CVE-2018-18704
PhpTpoint Pharmacy Management System suffers from a SQL injection vulnerability in the index.php username parameter...
CVE-2018-18711
An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can change the super administrator's password via index.php?m=core&f=panel&v=editinfo...
Cross site scripting
An XSS issue was discovered in index.php/admin/category/editcategory?id=73 in YUNUCMS 1.1.5...