PT-2021-10542

Name of the Vulnerable Software and Affected Versions: UCMS version 1.4.7 Description: A stored cross-site scripting XSS issue in the "/ucms/index.php?do=list edit" endpoint of UCMS allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, descriptio...

UCMS 跨站脚本漏洞

UCMS is a content management system written in PHP. A security vulnerability exists in UCMS, which originates from a stored cross-site scripting XSS vulnerability in ucms index.php. An attacker can exploit this vulnerability to execute client-side code...

CVE-2020-20781: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in /ucms/index.php?do=listedit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, description or content text fields...

CVE-2020-20124

Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...

CVE-2020-20124

Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...

CVE-2020-20124

Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...

CVE-2020-20124

Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...

CVE-2020-20124: Improper Control of Generation of Code

Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...

WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2023-17601)

WUZHI CMS is a PHP and MySQL based Content Management System CMS from Beijing WuZHI Technology Co. The vulnerability can be exploited by remote attackers to perform cross-site scripting attacks via the "email username" parameter in "index.php"...

CVE-2020-19915

Cross Site Scripting XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php...

CVE-2020-19915

Cross Site Scripting XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php...

Cross site scripting

Cross Site Scripting XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php...

CVE-2020-19915

The CVE-2020-19915 is a Cross-Site Scripting (XSS) vulnerability in WUZHI CMS 4.1.0, exploitable via the mailbox/email username parameter in index.php. Multiple connected sources corroborate the affected product/version and the input vector, describing remote XSS through that parameter. The docum...

CVE-2020-19915

Cross Site Scripting XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php...

CVE-2021-40674

An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php...

CVE-2020-19915: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php...

PT-2021-10418

Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: A Cross Site Scripting XSS issue exists in the software, specifically via the mailbox username in the "index.php" endpoint. This allows for potential malicious script execution. Recommendations: For WUZHI...

Wuzhi WUZHI CMS 跨站脚本漏洞

WUZHI CMS is a PHP and MySQL based Content Management System CMS from Beijing WuZHI Technology Co. The vulnerability can be exploited by remote attackers to perform cross-site scripting attacks via the "email username" parameter in "index.php"...

CVE-2021-40674: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php...

PT-2021-22941

Name of the Vulnerable Software and Affected Versions Wuzhi CMS version 4.1.0 Description An SQL injection issue exists via the KeyValue parameter in coreframe/app/order/admin/index.php. Recommendations For Wuzhi CMS version 4.1.0, consider restricting access to the KeyValue parameter in the...