13520 matches found
PT-2019-19015
Name of the Vulnerable Software and Affected Versions HongCMS version 3.0.0 Description The issue allows for arbitrary file read and write operations. This is achieved by utilizing a ../ in the filename parameter to the "admin/index.php/language/edit" API endpoint. Recommendations For HongCMS...
CVE-2019-8407: Improper Limitation of a Pathname to a Restricted Directory
HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI...
Design/Logic Flaw
Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=indexXSS value...
CVE-2019-8363
Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=indexXSS value...
CVE-2019-8363
The CVE-2019-8363 issue affects Verydows 2.0. An XSS vulnerability exists via the index.php?c=main a parameter, demonstrated with a=index[XSS] value. The NVD description confirms this vector and the impact includes reflected/console-like injection in the parameter handling, with CVSS2/3 base scor...
CVE-2019-8363
Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=indexXSS value...
PT-2019-18989
Name of the Vulnerable Software and Affected Versions Verydows version 2.0 Description The issue allows for XSS via the index.php?c=main API endpoint, specifically through the a parameter. This can be demonstrated by setting a to a value such as indexXSS. Recommendations For Verydows version 2.0,...
CVE-2019-8363: Improper Neutralization of Input During Web Page Generation
Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=indexXSS value...
Cross site scripting
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&viewid=XSS...
CVE-2019-8335
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&id=XSS...
CVE-2019-8334
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&viewid=XSS...
CVE-2019-8334
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&viewid=XSS...
CVE-2019-8335
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&id=XSS...
CVE-2019-8334
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&viewid=XSS...
CVE-2019-8334
CVE-2019-8334 affects SchoolCMS 2.3.1 . A cross-site scripting (XSS) flaw is present via the vulnerable request: index.php?a=Index&c=Channel&m=Home&viewid=[XSS], which could lead to injection of arbitrary script when a user loads the affected page. The primary description in the CVE notes an XSS ...
PT-2019-18972
Name of the Vulnerable Software and Affected Versions SchoolCMS version 2.3.1 Description An issue was discovered that allows for an XSS vulnerability. The vulnerability can be exploited via the index.php endpoint with specific parameters, including a=Index, c=Channel, m=Home, and id set to a...
PT-2019-18971
Name of the Vulnerable Software and Affected Versions SchoolCMS version 2.3.1 Description An issue was discovered that allows for an XSS vulnerability. The vulnerability can be exploited via the index.php endpoint with specific parameters, including a=Index, c=Channel, m=Home, and viewid set to...
CVE-2019-8334: Improper Neutralization of Input During Web Page Generation
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&viewid=XSS...
CVE-2019-8335: Improper Neutralization of Input During Web Page Generation
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&id=XSS...