29 matches found
EUVD-2022-2157
Malicious code in bioql PyPI...
EUVD-2022-2322
Malicious code in bioql PyPI...
Joomla! 跨站脚本漏洞
Joomla! is a free, open source content management system open-sourced by Joomla! A security vulnerability exists in Joomla! that stems from a lack of output escaping for the id attribute of a menu list...
flusity CMS Security Vulnerability
flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in Flusity CMS, which stems from the parameter menuid in the loadPostAddForm function of core/tools/posts.php that can lead to cross-site scripting...
PT-2023-32345
Name of the Vulnerable Software and Affected Versions flusity CMS affected versions not specified Description A problematic issue was found in the function loadPostAddForm of the file core/tools/posts.php, where the manipulation of the argument menu id leads to cross-site scripting. This issue ca...
GeniXCMS Cross-site Scripting (XSS) via the Menu ID field
In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request...
GHSA-3C7G-P9JX-8CGM GeniXCMS Cross-site Scripting (XSS) via the Menu ID field
In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request...
GHSA-478J-MCRR-3877 GeniXCMS Cross-site scripting (XSS) vulnerability
Cross-site scripting XSS vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu...
GeniXCMS Cross-site scripting (XSS) vulnerability
Cross-site scripting XSS vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu...
CVE-2020-18215
Multiple SQL Injection vulnerabilities in PHPSHE 1.7 in phpshe/admin.php via the 1 adid, 2 menuid, and 3 cashoutid parameters, which could let a remote malicious user execute arbitrary code...
PT-2021-10156
Name of the Vulnerable Software and Affected Versions: PHPSHE version 1.7 Description: The issue concerns SQL Injection vulnerabilities in the PHPSHE software. Specifically, the vulnerabilities are found in the phpshe/admin.php file and can be exploited via the ad id, menu id, and cashout id...
GeniXCMS Cross-Site Scripting Vulnerability (CNVD-2018-08912)
MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A cross-site scripting vulnerability exists in MetalGenix GeniXCMS version 1.1.0. A remote attacker can...
CVE-2017-14740
Cross-site scripting XSS vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu...
Cross site scripting
Cross-site scripting XSS vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu...
CVE-2017-14740
Cross-site scripting XSS vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu...
CVE-2017-14740
Cross-site scripting XSS vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu...
PT-2018-5696
Name of the Vulnerable Software and Affected Versions: GeniXCMS version 1.1.0 Description: A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu. This could potentially lead to unauthorized actions on the...
CVE-2017-14740: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu...