41 matches found
EUVD-2018-4649
Malware in sbrugna...
EUVD-2018-4648
Malware in sbrugna...
mao10cms cross-site scripting vulnerability
mao10cms is an open source content management system CMS developed using the PHP language. A cross-site scripting vulnerability exists in version 6 of mao10cms. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of 'm=bbs&a=index' page...
mao10cms Cross-site Script Injection Vulnerability
mao10cms is an open source content management system CMS developed using the PHP language. A cross-site scripting vulnerability exists in mao10cms version 6. Attackers can use the article page to inject arbitrary Web script or HTML...
CVE-2018-12696
mao10cms 6 allows XSS via the article page...
Cross site scripting
mao10cms 6 allows XSS via the m=bbs&a=index page...
CVE-2018-12695
mao10cms 6 allows XSS via the m=bbs&a=index page...
Cross site scripting
mao10cms 6 allows XSS via the article page...
CVE-2018-12696
mao10cms 6 allows XSS via the article page...
CVE-2018-12695
mao10cms 6 allows XSS via the m=bbs&a=index page...
CVE-2018-12695
mao10cms 6 allows XSS via the m=bbs&a=index page...
CVE-2018-12696
mao10cms 6 allows XSS via the article page...
CVE-2018-12695
mao10cms 6 contains a cross-site scripting (XSS) vulnerability exploitable via the m=bbs&a=index page. The issue is documented across multiple sources (CNVD-2018-12044, NVD entry CVE-2018-12695) and is described as allowing injection of arbitrary web script or HTML. The concrete vulnerability det...
CVE-2018-12696
mao10cms 6 is affected by a cross-site scripting (XSS) vulnerability in the article page. The CVE entry for CVE-2018-12696, corroborated by CNVD-2018-12115 and other sources, states that an XSS flaw exists in mao10cms version 6, enabling arbitrary script/HTML injection via the article page. The r...
Mao10CMS Theme\default\Public\header.php id parameter SQL injection
No description provided by source...
Mao10CMS do/remove_collection.php type参数 SQL注入
No description provided by source...
Mao10CMS /do/login.php user_name参数 SQL注入
No description provided by source...
Mao10cms v3.5.2 /theme/default/public/head-uesr.php等5处 SQL注入漏洞
No description provided by source...
File upload vulnerability in mao10cms frontend
Mao10CMS is based on Thinkphp and Bootstrap development of free open-source PHP building system, suitable for building a variety of mini-malls, shopping and sharing, community and corporate websites. mao10cms foreground /do/imgupload.php file file upload vulnerability, due to $FILES over the file...
Mao10CMS user_register.php 添加超级管理员逻辑漏洞
No description provided by source...