63 matches found
CVE-2018-10296
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter...
CVE-2017-16230
In admin/write-post.php in Typecho through 1.1, one can log in to the background page, write a new article, and add payload in the article content, resulting in XSS via index.php/action/contents-post-edit...
BoastMachine v3.0 platinum - Session Эd Hacking
Vagrant - E-hack.org 05.22.2007 BoastMachine v3.0 platinum - Session Id Hacking After the login into the site which alllows new user registration. Site user's data which is entered to change the topic, can be changed by another user, and that is a security hole because of ID interchangeability in...