CVE-2023-29847: Improper Neutralization of Input During Web Page Generation

AeroCMS v0.0.1 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the commentauthor and commentcontent parameters at /post.php. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-29847

AeroCMS v0.0.1 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the commentauthor and commentcontent parameters at /post.php. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2022-45331: Improper Neutralization of Special Elements used in an SQL Command

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the pid parameter at \post.php. This vulnerability allows attackers to access database information...

AeroCMS SQL Injection Vulnerability

AeroCMS is a content management system from the American company AeroCMS. AeroCMS version v0.0.1 suffers from a security vulnerability that stems from the pid parameter of its post.php component that allows an attacker to implement a SQL injection resulting in access to database information...

CVE-2022-45331

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the pid parameter at \post.php. This vulnerability allows attackers to access database information...

PT-2022-24051 · WordPress · Embedpress Plugin

Name of the Vulnerable Software and Affected Versions: EmbedPress Plugin affected versions not specified Description: A vulnerability has been found in the EmbedPress Plugin, affecting an unknown functionality of the file post.php of the component Shortcode Handler. This issue leads to cross-site...

PT-2022-20672

Name of the Vulnerable Software and Affected Versions Online Discussion Forum Site 1 affected versions not specified Description The issue is related to a blind SQL injection vulnerability. This vulnerability is located in the component /odfs/posts/view post.php. Recommendations At the moment,...

PT-2022-8943

Name of the Vulnerable Software and Affected Versions Victor CMS version 1.0 Description The issue is related to SQL injection. It can be exploited via the c id parameter of "admin edit comment.php", the p id parameter of "admin edit post.php", the u id parameter of "admin edit user.php", and the...

PT-2022-20327

Name of the Vulnerable Software and Affected Versions elitecms version 1.01 Description The issue concerns SQL Injection, which can be exploited via the "/admin/add post.php" API endpoint. This allows for potential unauthorized access to database information. Recommendations For elitecms version...

PT-2022-20326

Name of the Vulnerable Software and Affected Versions elitecms version 1.01 Description The issue allows for SQL Injection via the "admin/edit post.php" endpoint. Recommendations For elitecms version 1.01, update to a version that fixes the SQL Injection issue in the "admin/edit post.php" endpoin...

Ed01-Cms SQL Injection Vulnerability (CNVD-2022-79912)

Ed01-Cms is a Cms project in the Udemy course. version 20180505 of ED01-CMS is vulnerable to a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in post.php. An attacker could use this vulnerability to execute illegal SQL commands to steal...

CVE-2022-28524

ED01-CMS v20180505 was discovered to contain a SQL injection vulnerability via the component post.php...

Sql injection

ED01-CMS v20180505 was discovered to contain a SQL injection vulnerability via the component post.php...

CVE-2022-28524

ED01-CMS v20180505 was discovered to contain a SQL injection vulnerability via the component post.php...

CVE-2022-28524

ED01-CMS v20180505 was discovered to contain a SQL injection vulnerability via the component post.php...

CVE-2022-28524

ED01-CMS v20180505 contains a SQL injection in the component post.php due to lack of validation of externally entered SQL statements. This allows an attacker to execute arbitrary SQL commands on the database, potentially compromising data confidentiality, integrity, and availability. CVSS data fr...

PT-2022-19064

Name of the Vulnerable Software and Affected Versions ED01-CMS version v20180505 Description A SQL injection issue was discovered in the post.php component. This allows for potential exploitation. Recommendations For ED01-CMS version v20180505, consider restricting access to the post.php componen...

CVE-2022-28524: Improper Neutralization of Special Elements used in an SQL Command

ED01-CMS v20180505 was discovered to contain a SQL injection vulnerability via the component post.php...

PT-2022-18387

Name of the Vulnerable Software and Affected Versions Social Codia SMS version 1 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field in add post.php. This enables the execution of malicious code, potentially...

PT-2022-18200

Name of the Vulnerable Software and Affected Versions AeroCMS version 0.0.1 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field in add post.php. This enables the execution of malicious code on the web...