622 matches found
PT-2023-12145 · Tp5Cms · Tp5Cms
Name of the Vulnerable Software and Affected Versions: tp5cms versions through 2017-05-25 Description: An issue was discovered in the software, where the "admin.php/system/set.html" endpoint has a cross-site scripting XSS vulnerability via the keywords parameter. Recommendations: For versions...
tp5cms 跨站脚本漏洞
tp5cms is a cms framework based on thinkphp5 by fmsdwifull individual developer. A cross-site scripting vulnerability exists in tp5cms, which stems from the presence of XSS in the keywords parameter of admin.php/system/set.html...
CVE-2021-31280
An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the keywords parameter...
CVE-2023-33734
BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php...
CVE-2023-33734
BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php...
CVE-2023-33734
BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php...
CVE-2023-33734
BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php...
CVE-2023-33734
BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php...
PT-2023-24462 · Bluecms · Bluecms
Name of the Vulnerable Software and Affected Versions: BlueCMS version 1.6 Description: A SQL injection issue was found in BlueCMS via the keywords parameter at the "search.php" endpoint. Recommendations: For BlueCMS version 1.6, avoid using the keywords parameter in the "search.php" endpoint unt...
BlueCMS SQL注入漏洞
BlueCMS is a content management system CMS based on PHP and MySQL. A security vulnerability exists in BlueCMS v1.6, which can be exploited for SQL injection via the keywords parameter in search.php...
AI ChatBot < 4.5.6 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks to all admin when setting chatbot and all client when using chatbot 1. Go to "Settings Language Settings ChatBot Keywords" 2. Enter...
AI ChatBot < 4.5.6 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks to all admin when setting chatbot and all client when using chatbot PoC 1. Go to "Settings Language Settings ChatBot Keywords" 2...
CVE-2023-27091
An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameters...
CVE-2023-27091
An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameters...
XiaoBingby TeaCMS 授权问题漏洞
XiaoBingBy TeaCMS is a blog system by xiaobingby personal developer. A security vulnerability exists in XiaoBingby TeaCMS 2.3.3, which stems from an unauthorized access issue in the system that can be exploited by an attacker to elevate privileges via the id and keywords parameters...
CVE-2023-27091
An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameters...
CVE-2022-47141
Cross-Site Request Forgery CSRF vulnerability in Seerox WP Dynamic Keywords Injector plugin = 2.3.15 versions...
CVE-2022-47141
Cross-Site Request Forgery CSRF vulnerability in Seerox WP Dynamic Keywords Injector plugin = 2.3.15 versions...
