CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2019-03432)

CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A cross-site scripting vulnerability exists in the...

CVE-2018-20464

There is a reflected XSS vulnerability in the CMS Made Simple 2.2.8 admin/myaccount.php. This vulnerability is triggered upon an attempt to modify a user's mailbox with the wrong format. The response contains the user's previously entered email address...

bibleactivities.com XSS vulnerability

Vulnerable URL: https://www.bibleactivities.com/MyAccount/default.asp?framebody=1"...

homileticsonline.com XSS vulnerability

Vulnerable URL: http://www.homileticsonline.com/myaccount/default.asp?framebody=1"...

Wallacepos Cross-Site Scripting Vulnerability

wallacepos is a web-based POS system. A cross-site scripting vulnerability exists in wallacepos version 1.4.1, which stems from the program's failure to adequately filter user data submitted to wallacepos-master/myaccount/resetpassword.php. A remote attacker can exploit this vulnerability to...

Cross site scripting

XSS was discovered in dotCMS 3.7.0, with an authenticated attack against the /myAccount addressID parameter...

CVE-2017-5875

dotCMS 3.7.0 contains a cross-site scripting (XSS) vulnerability exploitable by an authenticated user via the /myAccount addressID parameter. Multiple sources (NVD/CNVD/OSV) confirm XSS with an authenticated impact (C/L/I/L, A none); CVSS3 score 5.4 (MEDIUM) with network attack vector and low pri...

A-Blog 2.0 - Multiple Remote File Include Vulnerabilities

No description provided by source. ============================================================================================== A-Blog v2.0 Remote File Include =============================================================================================== Critical Level : Dangerous A-Blog...

Unfixed XSS vulnerability at www.ticnet.se

Security researcher Uber0n, has submitted on 28/09/2010 a cross-site-scripting XSS vulnerability affecting www.ticnet.se, which at the time of submission ranked 34067 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is currently...

A-Blog v2.0 Remote File Include

============================================================================================== A-Blog v2.0 Remote File Include =============================================================================================== Critical Level : Dangerous A-Blog...

A-Blog 2.0 Multiple Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ======================================================= A-Blog 2.0 Multiple Remote File Include Vulnerabilities =======================================================...