CVE-2025-27770: Improper Neutralization of Special Elements in Output Used by a Downstream Component

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /createproject endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may b...

PT-2026-76678

Name of the Vulnerable Software and Affected Versions UpTrain versions prior to 0.7.2 Description UpTrain is an open-source platform used to evaluate and improve generative AI applications. The /create project endpoint allows authenticated users to execute arbitrary code on the host system,...

CVE-2018-10033

CMS Made Simple aka CMSMS 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter...

EUVD-2018-19605

Malware in sbrugna...

EUVD-2018-2117

Malware in sbrugna...

CVE-2022-30469

In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata" in /?module=fileman&section=get&page=grid leads to SQL injection...

CVE-2022-30469

In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata" in /?module=fileman&section=get&page=grid leads to SQL injection...

Afian FileRun SQL注入漏洞

Afian FileRun is a full-featured web-based file manager. sql injection vulnerability exists in Afian Filerun version 20220202, which stems from a lack of cleanup of the POST parameter metadata in the /?module=fileman§ion=get&page=grid page. An attacker could exploit this vulnerability to cause SQ...

CMS Made Simple admin/siteprefs.php stored cross-site scripting vulnerability

CMS Made Simple is a content management system developed using PHP, MySQL and Smarty template engine. A stored cross-site scripting vulnerability exists in admin/siteprefs.php in CMS Made Simple 2.2.7. The vulnerability can be exploited to conduct cross-site scripting attacks via the metadata...

CVE-2018-10033

CMS Made Simple aka CMSMS 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter...

Cross site scripting

CMS Made Simple aka CMSMS 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter...

CVE-2018-10033

CMS Made Simple aka CMSMS 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter...

CVE-2018-10033

CMS Made Simple (CMSMS) 2.2.7 is affected by a Stored XSS in admin/siteprefs.php via the metadata parameter. The root cause is a stored XSS vulnerability in the metadata parameter of the admin/siteprefs.php page, as documented across multiple sources (CMSMS/NVD/Red Hat entries). Exploitation deta...

CVE-2018-10033: Improper Neutralization of Input During Web Page Generation

CMS Made Simple aka CMSMS 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter...

CVE-2018-7893

CMS Made Simple CMSMS 2.2.6 has stored XSS in admin/moduleinterface.php via the metadata parameter...

Cross site scripting

CMS Made Simple CMSMS 2.2.6 has stored XSS in admin/moduleinterface.php via the metadata parameter...

CVE-2018-7893

CMS Made Simple CMSMS 2.2.6 has stored XSS in admin/moduleinterface.php via the metadata parameter...

CVE-2018-7893: Improper Neutralization of Input During Web Page Generation

CMS Made Simple CMSMS 2.2.6 has stored XSS in admin/moduleinterface.php via the metadata parameter...

CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2018-06468)

CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A cross-site scripting vulnerability exists in the...