Design/Logic Flaw

An issue was discovered in nc-cms through 2017-03-10. index.php?action=edithtml allows XSS via the name parameter, as demonstrated by a value beginning with homecontent and containing a crafted SRC attribute of an IMG element...

CVE-2018-18361

An issue was discovered in nc-cms through 2017-03-10. index.php?action=edithtml allows XSS via the name parameter, as demonstrated by a value beginning with homecontent and containing a crafted SRC attribute of an IMG element...

CVE-2018-18323

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=fileeditor&file=/../ URI...

CVE-2018-18322

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/index.php servicestart, servicerestart, servicefullstatus, or servicestop parameter...

CVE-2018-18324

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.480 has XSS via the admin/fileManager2.php fmcurrentdir parameter, or the admin/index.php module, servicestart, servicefullstatus, servicerestart, servicestop, or file within the fileeditor parameter...

CVE-2018-18296

CVE-2018-18296 describes a cross-site scripting (XSS) vulnerability in MetInfo 6.1.2. The issue is triggered via the parameter path /admin/index.php with the bigclass parameter when the request uses n=column&a=doadd. The connected sources corroborate the same vulnerability description across mult...

PT-2018-14417

Name of the Vulnerable Software and Affected Versions nc-cms versions prior to 2017-03-10 Description An issue was discovered that allows XSS via the name parameter in the "index.php?action=edit html" endpoint. This is demonstrated by a value beginning with 'home content' and containing a crafted...

PT-2018-14401

Name of the Vulnerable Software and Affected Versions DESHANG DSCMS version 1.1 Description The issue is related to a CSRF problem. It affects the "public/index.php/admin/admin/add.html" URI. Recommendations For DESHANG DSCMS version 1.1, consider implementing proper CSRF protection mechanisms to...

CVE-2018-18322: Improper Neutralization of Special Elements used in an OS Command

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/index.php servicestart, servicerestart, servicefullstatus, or servicestop parameter...

CVE-2018-18317: Cross-Site Request Forgery (CSRF)

DESHANG DSCMS 1.1 has CSRF via the public/index.php/admin/admin/add.html URI...

CVE-2018-18324: Improper Neutralization of Input During Web Page Generation

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.480 has XSS via the admin/fileManager2.php fmcurrentdir parameter, or the admin/index.php module, servicestart, servicefullstatus, servicerestart, servicestop, or file within the fileeditor parameter...

CVE-2018-18323: Improper Limitation of a Pathname to a Restricted Directory

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=fileeditor&file=/../ URI...

CVE-2018-18361: Improper Neutralization of Input During Web Page Generation

An issue was discovered in nc-cms through 2017-03-10. index.php?action=edithtml allows XSS via the name parameter, as demonstrated by a value beginning with homecontent and containing a crafted SRC attribute of an IMG element...

PT-2018-14396

Name of the Vulnerable Software and Affected Versions MetInfo version 6.1.2 Description The issue allows for XSS via the /admin/index.php endpoint with the bigclass parameter in an n=column&a=doadd action. This affects the bigclass parameter, which is used in the specified action. Recommendations...

CVE-2018-18296: Improper Neutralization of Input During Web Page Generation

MetInfo 6.1.2 has XSS via the /admin/index.php bigclass parameter in an n=column&a=doadd action...

CVE-2018-18290: Improper Neutralization of Input During Web Page Generation

An issue was discovered in nc-cms through 2017-03-10. index.php?action=edithtml&name=homecontent allows XSS via the HTML Source Editor. NOTE: the vendor disputes this because the form requires administrator privileges, and entering JavaScript is supported functionality...

CVE-2018-18257: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in BageCMS 3.1.3. An attacker can delete any files and folders on the web server via an index.php?r=admini/template/batch&command=deleteFile&fileName= or index.php?r=admini/template/batch&command=deleteFolder&folderName=../ directory traversal URI...

CVE-2018-18258: Improper Control of Generation of Code

An issue was discovered in BageCMS 3.1.3. The attacker can execute arbitrary PHP code on the web server and can read any file on the web server via an index.php?r=admini/template/updateTpl&filename= URI...

PT-2018-14384

Name of the Vulnerable Software and Affected Versions BageCMS version 3.1.3 Description An issue allows an attacker to execute arbitrary PHP code on the web server and read any file via an index.php?r=admini/template/updateTpl&filename= URI. Recommendations For BageCMS version 3.1.3, as a tempora...

PT-2018-14383

Name of the Vulnerable Software and Affected Versions BageCMS version 3.1.3 Description An issue was discovered that allows an attacker to delete any files and folders on the web server via a directory traversal attack using specific URI requests, such as...