1095 matches found
CVE-2018-19414
Multiple cross-site scripting XSS vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 keyword parameter to groups.php; 2 username parameter to login.php; or 3 date parameter to search.php...
CVE-2018-19414
Multiple cross-site scripting XSS vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 keyword parameter to groups.php; 2 username parameter to login.php; or 3 date parameter to search.php...
CVE-2018-19902
No-CMS 1.1.3 is prone to Persistent XSS via the blog/managearticle "keyword" parameter...
CVE-2018-19902
No-CMS 1.1.3 is prone to Persistent XSS via the blog/managearticle "keyword" parameter...
CVE-2018-19902
Vulnerability summary (CVE-2018-19902): No-CMS 1.1.3 is susceptible to a Persistent XSS attack via the blog/manage_article page, specifically through the keyword parameter. The available records indicate the issue is a stored/reflected-like XSS path focused on this input vector, but do not provid...
WUZHI CMS SQL Injection Vulnerability (CNVD-2019-03304)
WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A SQL injection vulnerability exists in the coreframe/app/coupon/admin/copyfrom.php file in WUZHI CMS version 4.1.0. A remote attacker can exploit this vulnerabili...
Magecart Group Ups Ante: Now Goes After Admin Credentials
A growing threat group within the Magecart family of criminals has evolved to skim data not only from website visitors – but also from site administrators as well. This new capability could allow Magecart bad actors to escalate attacks and infiltrate organizations, researchers said. The group in...
Vba2Graph - Generate Call Graphs From VBA Code, For Easier Analysis Of Malicious Documents
A tool for security researchers, who waste their time analyzing malicious Office macros. Generates a VBA call graph, with potential malicious keywords highlighted. Allows for quick analysis of malicous macros, and easy understanding of the execution flow. @MalwareCantFly Features Keyword...
S-CMS SQL Injection Vulnerability (NVD-C-2018-125521)
S-CMS is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station of the product. The search.php in S-CMS 1.5 has a SQL injection vulnerability, which can be exploited by an attacker through the keyword parameter to perform a SQL injecti...
CVE-2018-19331
An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...
CVE-2018-19331
An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...
S-CMS Cross-Site Scripting Vulnerability
S-CMS is a content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in the search.php file in S-CMS version 1.5, which can be exploited by remote attackers to inject arbitrary Web script or HTML with the help of the 'keyword' parameter...
CVE-2018-19145
An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter...
Cross site scripting
An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter...
Cross site scripting
DedeCMS 5.7 SP2 allows XSS via the /member/uploadsselect.php f or keyword parameter...
DedeCMS Cross-Site Scripting Vulnerability (CNVD-2019-01728)
DedeCMS is a PHP-based web content management system CMS. A cross-site scripting vulnerability exists in the /member/uploadsselect.php file in DedeCMS version 5.7 SP2, which can be exploited by a remote attacker with the help of the 'f' or 'keyword' parameter to A remote attacker can use the 'f' ...
mPulse Timeline - New Impactful Way to Gain Insight From Your mPulse Data
Introducing mPulse Timeline mPulse Timeline is the new interface of events, milestones & alerts, displayed in a simple & impactful format. Timeline is the first feature to be released for the new mPulse interface. It is a great way to showcase key insights in a friendly calendar timeline view,...
CVE-2018-16456
PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a keyword. NOTE: This may overlap with CVE-2018-6870 which has XSS via the Listings Search feature...