Wuzhi CMS 4.1.0 Cross Site Scripting

Exploit 1 of 2: Exploit Title: WUZHI CMS 4.1.0 XSS Vulnerability Date: 2018-4-23 Exploit Author: jiguang [email protected] Vendor Homepage: https://github.com/wuzhicms/wuzhicms Software Link: https://github.com/wuzhicms/wuzhicms Version: 4.1.0 CVE: CVE-2018-10313 An issue was discovered in WUZHI CMS...

CVE-2018-10311

A vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the tagpinyin parameter to the /index.php?m=tags&f=index&v=add URI...

Cross site scripting

A vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the tagpinyin parameter to the /index.php?m=tags&f=index&v=add URI...

CVE-2018-10311

A vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the tagpinyin parameter to the /index.php?m=tags&f=index&v=add URI...

WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2018-08546)

WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in WUZHI CMS version 4.1.0. A remote attacker can inject arbitrary Web script or HTML by sending the 'pinyin' parameter...

PT-2018-9818 · Wuzhi · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: A persistent XSS issue allows remote attackers to inject arbitrary web script or HTML via the tagpinyin parameter to the "/index.php?m=tags&f=index&v=add" API endpoint. Recommendations: For WUZHI CMS versi...

Burrowing ideas | account to attack of a several common techniques-vulnerability warning-the black bar safety net

web security incidents, the account, is usually presented to the attacker's first point of contact with account-related functions if there is a defect, an attacker can obtain the key information and important features, such as, the login fails, the error message can determine whether the because...

MS11-088: Description of the security update for Microsoft Pinyin IME 2010 for Microsoft Office 2010 and Microsoft Office 2010 Service Pack 1: December 13, 2011

MS11-088: Description of the security update for Microsoft Pinyin IME 2010 for Microsoft Office 2010 and Microsoft Office 2010 Service Pack 1: December 13, 2011 Introduction Microsoft has released security bulletin MS11-088. To view the complete security bulletin, visit one of the following...

MS15-116: Description of the security update for Pinyin IME 2010: November 10, 2015

None None...

openSUSE Security Update : ibus-pinyin (openSUSE-SU-2013:1825-1)

This update fixes the following issue with ibus-pinyin : - Fix visible password entry in GNOME lock screen CVE-2013-4509, bnc847718 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

[SECURITY] Fedora 19 Update: ibus-chewing-1.4.10.1-1.fc19

IBus-chewing is an IBus front-end of Chewing, an intelligent Chinese input method for Zhuyin BoPoMoFo users. It supports various Zhuyin keyboard layout, such as standard DaChen, IBM, Gin-Yeah, Eten, Eten 26, Hsu, Dvorak, Dvorak-Hsu, and DaChen26. Chewing also support toned Hanyu pinyin input...

[SECURITY] Fedora 20 Update: ibus-chewing-1.4.10.1-1.fc20

IBus-chewing is an IBus front-end of Chewing, an intelligent Chinese input method for Zhuyin BoPoMoFo users. It supports various Zhuyin keyboard layout, such as standard DaChen, IBM, Gin-Yeah, Eten, Eten 26, Hsu, Dvorak, Dvorak-Hsu, and DaChen26. Chewing also support toned Hanyu pinyin input...

Fedora Update for ibus-pinyin FEDORA-2013-20993

Check for the Version of ibus-pinyin OpenVAS Vulnerability Test Fedora Update for ibus-pinyin FEDORA-2013-20993 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Fedora Update for ibus-pinyin FEDORA-2013-20993

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 19 Update: ibus-pinyin-1.5.0-5.fc19

The Chinese Pinyin and Bopomofo input methods for IBus platform...

Fedora 19 : ibus-pinyin-1.5.0-5.fc19 (2013-20993)

Fixes ibus: visible password entry flaw. rhbz1027029 CVE-2013-4509 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[SECURITY] Fedora 20 Update: ibus-pinyin-1.5.0-5.fc20

The Chinese Pinyin and Bopomofo input methods for IBus platform...

MS13-075: Vulnerability in Microsoft Office IME (Chinese) Could Allow Elevation of Privilege (2878687)

The version of Microsoft Office Input Method Editor Chinese installed on the remote host has a privilege escalation vulnerability. A local attacker could exploit this by utilizing the MSPY IME toolbar in an unspecified manner, resulting in arbitrary code execution in kernel mode. C Tenable Networ...

Microsoft Office Pinyin IME 2010本地权限提升漏洞(CVE-2013-3859)

BUGTRAQ ID: 62181 CVECAN ID: CVE-2013-3859 Microsoft Office Pinyin IME是微软开发的拼音输入方法。 Office 2010 中文版默认安装的MSPY IME（中文）没有正确开放某些配置选项，如果登录攻击者从 Microsoft Pinyin IME 简体中文版的工具栏中启动 Internet Explorer，则该漏洞可能允许特权提升。成功利用此漏洞的攻击者可以运行内核模式中的任意代码。 0 Microsoft Office 2010 Microsoft Pinyin IME 2010 厂商补丁： Microsoft...

CVE-2013-3859

Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability."...