KindEditor 4.1.2 (name parameter) Reflected XSS Vulnerability

Summary KindEditor online HTML editor is a set of open source, mainly for users on the site to get WYSIWYG editing effects, developers can replace the traditional multi-line text input box textarea KindEditor rich visualization text input box. Description KindEditor is prone to a reflected...

KindEditor - name Cross-Site Scripting

KindEditor - name Cross-Site Scripting source: https://www.securityfocus.com/bid/55172/info KindEditor is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of...

KindEditor - 'name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/55172/info KindEditor is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Intelligent core multi-language enterprise website management system 4. 1. 0 SQL injection and upload vulnerabilities-vulnerability warning-the black bar safety net

Vulnerability type: SQL injection Test version: the intelligent core multi-language enterprise website management system 4. 1. 0 Editor Version: KindEditor 4.0.3 Vulnerability description: ① Injection vulnerability Vulnerability file:\Cn\About. asp & \Include\Bottom. asp The exploit: the Add Tabl...

KindEditor 3.5.5 遍历目录漏洞

No description provided by source. 1.http://localhost/67cms/kindeditor/php/filemanagerjson.php?path=/ //path=/，爆出绝对路径D:\AppServ\www\67cms\kindeditor\php\filemanagerjson.php 2.http://localhost/67cms/kindeditor/php/filemanagerjson.php?path=AppServ/www/67cms/ //根据爆出的绝对路径，修改path的值为AppServ/www/67cms/...

Kindeditor traverse the directory 0DAY-vulnerability warning-the black bar safety net

Author: sub - ↘meter Version: 3.4.2 Description: KindEditor is an open source HTML visual editor, mainly used to allow users on the site to get WYSIWYG editing effects, compatible with IE, Firefox, Chrome, Safari, Opera and other mainstream browser. KindEditor using JavaScript, you can seamlessly...