CVE-2018-10023

Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun aka an authenticated comment...

EUVD-2018-2107

Malware in sbrugna...

CatfishCMS suffers from a cross-site scripting vulnerability

CatfishCMS is an open source content management system CMS written in PHP. A cross-site scripting vulnerability exists in Catfish CMS version V4.8.27, which can be exploited by a remote attacker to inject arbitrary Web script or HTML by sending the 'pinglun' parameter to the /index/Index/pinglun...

Catfish CMS Cross-Site Scripting Vulnerability

Catfish CMS is an open source content management system CMS written in PHP. A cross-site scripting vulnerability exists in comments in Catfish CMS version 4.7.21. A remote attacker can exploit this vulnerability by sending the 'pinglun' parameter to cat/index/index/pinglun to inject arbitrary web...

CVE-2018-10023

Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun aka an authenticated comment...

CVE-2018-10023

Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun aka an authenticated comment...

Cross site scripting

Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun aka an authenticated comment...

CVE-2018-10023

Catfish CMS version 4.7.21 is reported to be vulnerable to a cross-site scripting (XSS) issue in the pinglun parameter of the path cat/index/index/pinglun (an authenticated comment). All connected sources (Red Hat, CNVD, CNVD CNVD-2018-08759, NVD, CVE records) corroborate that this XSS affects Ca...

CVE-2018-10023: Improper Neutralization of Input During Web Page Generation

Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun aka an authenticated comment...

shopxp pinglun. asp file SQL injection vulnerability analysis-vulnerability warning-the black bar safety net

Vulnerability author: zpino Vulnerability exists in/admin/pinglun. asp file !-- include file="xp. asp" - htmlheadtitle%=webname%--user reviews/title meta http-equiv="Content-Type" content="text/html; charset=gb2312" link href="../imgshopxp/css. css" rel="stylesheet" type="text/css" /head body...

shopxp pinglun. asp page injection vulnerability-vulnerability warning-the black bar safety net

shopxp pinglun. asp page injection vulnerability Injecting the subject of the sentence exp 1=2 union select 1,2,3,4,5,6,7,8,9,10,11 from shopxpadmin...

Shopv8 Mall system v10. 4 8 0day-vulnerability warning-the black bar safety net

pinglun. asp page thereSQL injection Front Desk All Programs are added to the anti-injection code, so I will not go see. Directly turn the background of the watch, the first watch did not need to verify, luck is very good, find. pinglun. asp this file. The code is as follows: %dim the bookid,acti...

Shopv8 Mall system v10. 4 8 0day vulnerabilities-vulnerability warning-the black bar safety net

Publishing author: Lan3a Affected versions: Shopv8 Mall system v10. 4 8 Vulnerability description: pinglun. asp page thereSQL injection Author:Lan3a Reprint please indicate the source: http://blog.cfyhack.cn/ Front Desk All Programs are added to the anti-injection code, so I will not go see...