36 matches found
PT-2024-30019
Name of the Vulnerable Software and Affected Versions Savsoft Quiz version 6.0 Description A issue was found in the Category Page component, specifically in the /public/index.php/Qbank/editCategory file. The manipulation of the category name argument with malicious input, such as alert'XSS', can...
CVE-2020-18646
Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/public/index.php"...
CVE-2020-18646: Exposure of Resource to Wrong Sphere
Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/public/index.php"...
PT-2021-10192
Name of the Vulnerable Software and Affected Versions: NoneCMS version 1.3 Description: The issue allows remote attackers to obtain sensitive information. This is achieved via the component "/public/index.php". Recommendations: For NoneCMS version 1.3, consider restricting access to the...
CVE-2020-23376: Cross-Site Request Forgery (CSRF)
NoneCMS v1.3 has a CSRF vulnerability in public/index.php/admin/nav/add.html, as demonstrated by adding a navigation column which can be injected with arbitrary web script or HTML via the name parameter to launch a stored XSS attack...
CVE-2019-17431
An issue was discovered in fastadmin 1.0.0.20190705beta. There is a public/index.php/admin/auth/admin/add CSRF vulnerability...
CVE-2019-17431: Cross-Site Request Forgery (CSRF)
An issue was discovered in fastadmin 1.0.0.20190705beta. There is a public/index.php/admin/auth/admin/add CSRF vulnerability...
PT-2019-15152
Name of the Vulnerable Software and Affected Versions fastadmin version 1.0.0.20190705 beta Description An issue was discovered in the software, specifically a CSRF vulnerability in the public/index.php/admin/auth/admin/add endpoint. Recommendations For fastadmin version 1.0.0.20190705 beta, as a...
PT-2019-14793
Name of the Vulnerable Software and Affected Versions NoneCMS version 1.3 Description The issue concerns a CSRF flaw in the public/index.php/admin/admin/dele.html endpoint, which can be exploited to delete the admin user. Recommendations For NoneCMS version 1.3, as a temporary workaround, conside...
CVE-2019-16721: Cross-Site Request Forgery (CSRF)
NoneCMS v1.3 has CSRF in public/index.php/admin/admin/dele.html, as demonstrated by deleting the admin user...
CVE-2018-18317: Cross-Site Request Forgery (CSRF)
DESHANG DSCMS 1.1 has CSRF via the public/index.php/admin/admin/add.html URI...
PT-2018-14401
Name of the Vulnerable Software and Affected Versions DESHANG DSCMS version 1.1 Description The issue is related to a CSRF problem. It affects the "public/index.php/admin/admin/add.html" URI. Recommendations For DESHANG DSCMS version 1.1, consider implementing proper CSRF protection mechanisms to...
CVE-2018-9307
dsmall v20180320 allows XSS via the pdrsn parameter to public/index.php/home/predeposit/index.html...
CVE-2018-9307
dsmall v20180320 allows XSS via the pdrsn parameter to public/index.php/home/predeposit/index.html...
CVE-2018-9307: Improper Neutralization of Input During Web Page Generation
dsmall v20180320 allows XSS via the pdrsn parameter to public/index.php/home/predeposit/index.html...
PT-2018-18965
Name of the Vulnerable Software and Affected Versions dsmall version v20180320 Description The issue allows for XSS via the pdr sn parameter to the "public/index.php/home/predeposit/index.html" endpoint. Recommendations For version v20180320, avoid using the pdr sn parameter in the affected...
CVE-2018-9016
dsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI...
Cross site request forgery (csrf)
dsmall v20180320 allows physical path leakage via a public/index.php/home/predeposit/index.html?pdrsn= request...
CVE-2018-9016
The CVE-2018-9016 entry corresponds to a cross‑site scripting (XSS) vulnerability in dsmall v20180320, exploitable via the main page search box (public/index.php/home). The CNVD entry explicitly notes that a remote attacker can inject arbitrary HTML/JavaScript to obtain sensitive information. The...