186 matches found
CVE-2022-25411
A Remote Code Execution RCE vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-25411
A Remote Code Execution RCE vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-25410
MaxSite CMS v180 is vulnerable to a stored XSS via the parameter f_file_description in /admin/files. The root cause is insufficient validation/sanitization of user-supplied data when handling file descriptions, allowing injected script to be stored and later executed in the victim’s browser. Repo...
CVE-2022-25410
Maxsite CMS v180 was discovered to contain a stored cross-site scripting XSS vulnerability via the parameter ffiledescription at /admin/files...
CVE-2022-25410
Maxsite CMS v180 was discovered to contain a stored cross-site scripting XSS vulnerability via the parameter ffiledescription at /admin/files...
MaxSite CMS 跨站脚本漏洞
MaxSite CMS is a web content management system of the Russian MaxSite CMS open source project.MaxSite CMS 108 has a cross-site scripting vulnerability that can be exploited by attackers to perform cross-site scripting attacks via the ftags parameter in /admin/pageedit/3...
MaxSite CMS 路径遍历漏洞
MaxSite CMS is a web content management system of the Russian MaxSite CMS open source project . Maxsite CMS has arbitrary file deletion vulnerability , the vulnerability stems from all-files-update-ajax.php in the dir and deletefile parameters for the file name lack of validation , the attacker c...
MaxSite CMS 跨站脚本漏洞
MaxSite CMS is a web content management system of the Russian MaxSite CMS open source project.Maxsite CMS has a cross-site scripting vulnerability , the vulnerability stems from the lack of parameters in the management file f the user-supplied data and output data validation filter , an attacker...
MaxSite CMS 代码问题漏洞
MaxSite CMS is a web content management system from the Russian MaxSite CMS open source project. Maxsite CMS is vulnerable to file uploads, which can be exploited by attackers to execute arbitrary code via crafted PHP files...
MaxSite CMS Input Validation Error Vulnerability
MaxSite CMS is a Russian MaxSite CMS open source project a web content management system . An input validation error vulnerability exists in MaxSite CMS, which originates from the product's Documents page not validating input data. The vulnerability can be exploited to execute arbitrary code...
CVE-2021-27983
Remote Code Execution RCE vulnerability exists in MaxSite CMS v107.5 via the Documents page...
CVE-2021-27983
Remote Code Execution RCE vulnerability exists in MaxSite CMS v107.5 via the Documents page...
Remote code execution
Remote Code Execution RCE vulnerability exists in MaxSite CMS v107.5 via the Documents page...
CVE-2021-27983
The CVE-2021-27983 entry concerns MaxSite CMS v107.5 where an input validation error on the Documents page enables Remote Code Execution (RCE). Multiple sources (CVE listings, CNVD, CNNVD, Red Hat advisory) corroborate: the vulnerability stems from insufficient input validation in the Documents p...
CVE-2021-27983
Remote Code Execution RCE vulnerability exists in MaxSite CMS v107.5 via the Documents page...
MaxSite CMS 输入验证错误漏洞
MaxSite CMS is a Russian MaxSite CMS open source project a web content management system . An input validation error vulnerability exists in MaxSite CMS, which originates from the product's Documents page not validating input data. The vulnerability can be exploited to execute arbitrary code...
MaxSite CMS Cross-Site Scripting Vulnerability
MaxSite CMS is a web content management system from the Russian MaxSite CMS open source project. MaxSite CMS has a security vulnerability that allows remote attackers to inject arbitrary web scripts into the page using the vulnerability...
CVE-2021-35265
A reflected cross-site scripting XSS vulnerability in MaxSite CMS before V106 via product/page/ allows remote attackers to inject arbitrary web script to a page...