CVE-2022-25411

A Remote Code Execution RCE vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-25413

Maxsite CMS v108 was discovered to contain a stored cross-site scripting XSS vulnerability via the parameter ftags at /admin/pageedit/3...

Cross site scripting

Maxsite CMS v108 was discovered to contain a stored cross-site scripting XSS vulnerability via the parameter ftags at /admin/pageedit/3...

Arbitrary file deletion

Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /adminpage/all-files-update-ajax.php via the dir and deletefile parameters...

Cross site scripting

Maxsite CMS v180 was discovered to contain a stored cross-site scripting XSS vulnerability via the parameter ffiledescription at /admin/files...

Remote code execution

A Remote Code Execution RCE vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-25413

Maxsite CMS v108 was discovered to contain a stored cross-site scripting XSS vulnerability via the parameter ftags at /admin/pageedit/3...

CVE-2022-25413

Maxsite CMS v108 is affected by a stored cross-site scripting (XSS) vulnerability through the f_tags parameter in /admin/page_edit/3 . The issue is evidenced across multiple sources (NVD, CNVD, Red Hat, OSV, CVE listings) under CVE-2022-25413, confirming the vulnerable component and entry. The pr...

CVE-2022-25413

Maxsite CMS v108 was discovered to contain a stored cross-site scripting XSS vulnerability via the parameter ftags at /admin/pageedit/3...

CVE-2022-25412

Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /adminpage/all-files-update-ajax.php via the dir and deletefile parameters...

CVE-2022-25412

Maxsite CMS v180 is affected by CVE-2022-25412 due to multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-update-ajax.php. The root cause is lack of validation for the dir and deletefile parameters, enabling an attacker to delete arbitrary files. Exploitation details or in-t...

CVE-2022-25412

Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /adminpage/all-files-update-ajax.php via the dir and deletefile parameters...

CVE-2022-25411

A Remote Code Execution RCE vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-25411

A Remote Code Execution RCE vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-25411

CVE-2022-25411 affects MaxSite CMS (Maxsite CMS) v180, with a Remote Code Execution (RCE) vulnerability exploitable via a crafted PHP file uploaded or executed through the /admin/options path. The issue is described consistently across multiple sources in the connected documents as enabling attac...

CVE-2022-25410

MaxSite CMS v180 is vulnerable to a stored XSS via the parameter f_file_description in /admin/files. The root cause is insufficient validation/sanitization of user-supplied data when handling file descriptions, allowing injected script to be stored and later executed in the victim’s browser. Repo...

CVE-2022-25410

Maxsite CMS v180 was discovered to contain a stored cross-site scripting XSS vulnerability via the parameter ffiledescription at /admin/files...

CVE-2022-25410

Maxsite CMS v180 was discovered to contain a stored cross-site scripting XSS vulnerability via the parameter ffiledescription at /admin/files...

MaxSite CMS 跨站脚本漏洞

MaxSite CMS is a web content management system of the Russian MaxSite CMS open source project.Maxsite CMS has a cross-site scripting vulnerability , the vulnerability stems from the lack of parameters in the management file f the user-supplied data and output data validation filter , an attacker...

MaxSite CMS 代码问题漏洞

MaxSite CMS is a web content management system from the Russian MaxSite CMS open source project. Maxsite CMS is vulnerable to file uploads, which can be exploited by attackers to execute arbitrary code via crafted PHP files...