46 matches found
EUVD-2020-11170
Malware in sbrugna...
EUVD-2020-11171
Malware in sbrugna...
EUVD-2020-13368
Malware in sbrugna...
EUVD-2020-10061
Malware in sbrugna...
CVE-2020-18132
Cross Site Scripting XSS vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category name field to categoryEdit...
CVE-2020-19263
A cross-site request forgery CSRF in MipCMS v5.0.1 allows attackers to arbitrarily escalate user privileges to administrator via index.php?s=/user/ApiAdminUser/itemEdit...
CVE-2020-20582
A server side request forgery SSRF vulnerability in /ApiAdminDomainSettings.php of MipCMS 5.0.1 allows attackers to access sensitive information...
CVE-2020-19264
A cross-site request forgery CSRF in MipCMS v5.0.1 allows attackers to arbitrarily add users via index.php?s=/user/ApiAdminUser/itemAdd...
CVE-2020-18132
Cross Site Scripting XSS vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category name field to categoryEdit...
CVE-2020-18132
Cross Site Scripting XSS vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category name field to categoryEdit...
PT-2023-11485
Name of the Vulnerable Software and Affected Versions MIPCMS version 3.6.0 Description The issue allows attackers to execute arbitrary code via the category name field in the categoryEdit function. This is a Cross Site Scripting XSS issue, which means attackers can inject malicious scripts into...
CVE-2020-18132: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category name field to categoryEdit...
CVE-2020-18132
Cross Site Scripting XSS vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category name field to categoryEdit...
CVE-2020-18132
CVE-2020-18132 is a Cross Site Scripting (XSS) vulnerability in MIPCMS 3.6.0 that allows attackers to execute arbitrary code via the category name field to categoryEdit. The provided documents identify the affected software (MIPCMS 3.6.0) and the vulnerable component/entry point (categoryEdit via...
CVE-2020-18132
Cross Site Scripting XSS vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category name field to categoryEdit...
CVE-2020-19264
A cross-site request forgery CSRF in MipCMS v5.0.1 allows attackers to arbitrarily add users via index.php?s=/user/ApiAdminUser/itemAdd...
CVE-2020-19264
A cross-site request forgery CSRF in MipCMS v5.0.1 allows attackers to arbitrarily add users via index.php?s=/user/ApiAdminUser/itemAdd...
CVE-2020-19263
A cross-site request forgery CSRF in MipCMS v5.0.1 allows attackers to arbitrarily escalate user privileges to administrator via index.php?s=/user/ApiAdminUser/itemEdit...
