1488 matches found
S-CMS SQL Injection Vulnerability (NVD-C-2018-125521)
S-CMS is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station of the product. The search.php in S-CMS 1.5 has a SQL injection vulnerability, which can be exploited by an attacker through the keyword parameter to perform a SQL injecti...
CVE-2018-19331
An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...
CVE-2018-19331
An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...
CVE-2018-19331: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...
PT-2018-14920
Name of the Vulnerable Software and Affected Versions S-CMS version 1.5 Description A SQL injection issue was found in the search functionality. The vulnerability can be exploited through the keyword parameter in the "search.php" endpoint. Recommendations For S-CMS version 1.5, avoid using the...
S-CMS Cross-Site Scripting Vulnerability
S-CMS is a content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in the search.php file in S-CMS version 1.5, which can be exploited by remote attackers to inject arbitrary Web script or HTML with the help of the 'keyword' parameter...
CVE-2018-19145
An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter...
Cross site scripting
An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter...
CVE-2018-19145: Improper Neutralization of Input During Web Page Generation
An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter...
PT-2018-14834
Name of the Vulnerable Software and Affected Versions S-CMS version 1.5 Description An issue was discovered in the software, which is related to a security problem. The problem is an XSS issue in the "search.php" file via the keyword parameter. Recommendations For S-CMS version 1.5, consider...
Cross site scripting
DedeCMS 5.7 SP2 allows XSS via the /member/uploadsselect.php f or keyword parameter...
CVE-2018-18781: Improper Neutralization of Input During Web Page Generation
DedeCMS 5.7 SP2 allows XSS via the /member/uploadsselect.php f or keyword parameter...
PT-2018-14645
Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7 SP2 Description The issue allows for XSS attacks via the "/member/uploads select.php" endpoint for the keyword parameter. Recommendations For DedeCMS version 5.7 SP2, as a temporary workaround, consider restricting access t...
DedeCMS Cross-Site Scripting Vulnerability (CNVD-2019-01728)
DedeCMS is a PHP-based web content management system CMS. A cross-site scripting vulnerability exists in the /member/uploadsselect.php file in DedeCMS version 5.7 SP2, which can be exploited by a remote attacker with the help of the 'f' or 'keyword' parameter to A remote attacker can use the 'f' ...
mPulse Timeline - New Impactful Way to Gain Insight From Your mPulse Data
Introducing mPulse Timeline mPulse Timeline is the new interface of events, milestones & alerts, displayed in a simple & impactful format. Timeline is the first feature to be released for the new mPulse interface. It is a great way to showcase key insights in a friendly calendar timeline view,...
CVE-2018-16456
PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a keyword. NOTE: This may overlap with CVE-2018-6870 which has XSS via the Listings Search feature...
CVE-2018-16456
PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a keyword. NOTE: This may overlap with CVE-2018-6870 which has XSS via the Listings Search feature...
CVE-2018-16455
PHP Scripts Mall Market Place Script 1.0.1 allows XSS via a keyword...
PT-2018-13580 · Php Scripts Mall · Php Scripts Mall Market Place Script
Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Market Place Script version 1.0.1 Description: The issue allows for cross-site scripting XSS attacks via a keyword. Recommendations: For PHP Scripts Mall Market Place Script version 1.0.1, update the script to a version that...