13677 matches found
CVE-2020-36037
An issue was disocvered in wuzhicms version 4.1.0, allows remote attackers to execte arbitrary code via the setting parameter to the ueditor in index.php...
PT-2023-11798
Name of the Vulnerable Software and Affected Versions wuzhicms version 4.1.0 Description An issue was discovered in wuzhicms, allowing remote attackers to execute arbitrary code via the setting parameter to the ueditor in "index.php". Recommendations For wuzhicms version 4.1.0, consider disabling...
CVE-2020-36037
An issue was disocvered in wuzhicms version 4.1.0, allows remote attackers to execte arbitrary code via the setting parameter to the ueditor in index.php...
CVE-2020-36037: Undefined Security Weakness
An issue was disocvered in wuzhicms version 4.1.0, allows remote attackers to execte arbitrary code via the setting parameter to the ueditor in index.php...
WUZHI CMS Security Vulnerabilities
WUZHI CMS is a PHP and MySQL based open source content management system CMS from WUZHI. A security vulnerability exists in WUZHI CMS version 4.1.0, which originated from allowing an attacker to execute arbitrary code via the uiditor parameter in index.php...
CVE-2023-36312
There is a Cross Site Scripting XSS vulnerability in the value-enum-obfincludetimezone parameter of index.php in PHPJabbers Callback Widget v1.0...
CVE-2023-36312
There is a Cross Site Scripting XSS vulnerability in the value-enum-obfincludetimezone parameter of index.php in PHPJabbers Callback Widget v1.0...
CVE-2023-36309
There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Document Creator v1.0...
CVE-2023-36309
There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Document Creator v1.0...
CVE-2023-36309
There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Document Creator v1.0...
CVE-2023-36310
There is a Cross Site Scripting XSS vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0...
Cross site scripting
There is a Cross Site Scripting XSS vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0...
Sql injection
There is a SQL injection SQLi vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0...
Cross site scripting
There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Callback Widget v1.0...
Cross site scripting
There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Document Creator v1.0...
CVE-2023-36314
CVE-2023-36314 describes a Cross Site Scripting (XSS) vulnerability in PHPJabbers Callback Widget v1.0, specifically in the value-text-o_sms_email_request_message parameter of index.php. Connected documents confirm the affected product and vulnerable parameter. No exploitation details are provide...
CVE-2023-36311
CVE-2023-36311: SQL injection in the PHPJabbers Document Creator v1.0, triggered by the column parameter of index.php. Affects PHPJabbers Document Creator; root cause is unsafely handled SQL in the column param. Documented references indicate high risk (NVD/Red Hat entries) with no explicit explo...
CVE-2023-36314
There is a Cross Site Scripting XSS vulnerability in the value-text-osmsemailrequestmessage parameters of index.php in PHPJabbers Callback Widget v1.0...