Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:18 p.m.4 views

CVE-2018-10023

Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun aka an authenticated comment...

5.4CVSS5.7AI score0.00437EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-2107

Malware in sbrugna...

5.4CVSS5.5AI score0.00437EPSS
Exploits1References2
CNVD
CNVD
added 2018/09/25 12:0 a.m.1 views

CatfishCMS suffers from a cross-site scripting vulnerability

CatfishCMS is an open source content management system CMS written in PHP. A cross-site scripting vulnerability exists in Catfish CMS version V4.8.27, which can be exploited by a remote attacker to inject arbitrary Web script or HTML by sending the 'pinglun' parameter to the /index/Index/pinglun...

6.1AI score
Exploits0
CNVD
CNVD
added 2018/04/12 12:0 a.m.1 views

Catfish CMS Cross-Site Scripting Vulnerability

Catfish CMS is an open source content management system CMS written in PHP. A cross-site scripting vulnerability exists in comments in Catfish CMS version 4.7.21. A remote attacker can exploit this vulnerability by sending the 'pinglun' parameter to cat/index/index/pinglun to inject arbitrary web...

5.4CVSS6.2AI score0.00437EPSS
Exploits1References1
Prion
Prion
added 2018/04/11 5:29 p.m.6 views

Cross site scripting

Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun aka an authenticated comment...

3.5CVSS5.1AI score0.00437EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2018/04/11 5:29 p.m.7 views

CVE-2018-10023

Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun aka an authenticated comment...

5.4CVSS5.2AI score0.00437EPSS
Exploits1References1
OSV
OSV
added 2018/04/11 5:29 p.m.1 views

CVE-2018-10023

Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun aka an authenticated comment...

5.4CVSS5.8AI score0.00437EPSS
Exploits1References1
CVE
CVE
added 2018/04/11 5:0 p.m.49 views

CVE-2018-10023

Catfish CMS version 4.7.21 is reported to be vulnerable to a cross-site scripting (XSS) issue in the pinglun parameter of the path cat/index/index/pinglun (an authenticated comment). All connected sources (Red Hat, CNVD, CNVD CNVD-2018-08759, NVD, CVE records) corroborate that this XSS affects Ca...

5.4CVSS5.1AI score0.00437EPSS
Exploits1References1Affected Software1
myhack58
myhack58
added 2013/12/12 12:0 a.m.48 views

shopxp pinglun. asp file SQL injection vulnerability analysis-vulnerability warning-the black bar safety net

Vulnerability author: zpino Vulnerability exists in/admin/pinglun. asp file !-- include file="xp. asp" - htmlheadtitle%=webname%--user reviews/title meta http-equiv="Content-Type" content="text/html; charset=gb2312" link href="../imgshopxp/css. css" rel="stylesheet" type="text/css" /head body...

0.2AI score
Exploits0
myhack58
myhack58
added 2010/07/22 12:0 a.m.59 views

shopxp pinglun. asp page injection vulnerability-vulnerability warning-the black bar safety net

shopxp pinglun. asp page injection vulnerability Injecting the subject of the sentence exp 1=2 union select 1,2,3,4,5,6,7,8,9,10,11 from shopxpadmin...

0.2AI score
Exploits0
myhack58
myhack58
added 2010/07/22 12:0 a.m.9 views

Shopv8 Mall system v10. 4 8 0day-vulnerability warning-the black bar safety net

pinglun. asp page thereSQL injection Front Desk All Programs are added to the anti-injection code, so I will not go see. Directly turn the background of the watch, the first watch did not need to verify, luck is very good, find. pinglun. asp this file. The code is as follows: %dim the bookid,acti...

7.4AI score
Exploits0
myhack58
myhack58
added 2010/07/19 12:0 a.m.14 views

Shopv8 Mall system v10. 4 8 0day vulnerabilities-vulnerability warning-the black bar safety net

Publishing author: Lan3a Affected versions: Shopv8 Mall system v10. 4 8 Vulnerability description: pinglun. asp page thereSQL injection Author:Lan3a Reprint please indicate the source: http://blog.cfyhack.cn/ Front Desk All Programs are added to the anti-injection code, so I will not go see...

7.4AI score
Exploits0
Rows per page
Query Builder