CVE-2021-40881: Undefined Security Weakness

An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code...

PublicCMS 安全漏洞

PublicCMS is an open source content management system CMS written in Java from PublicCMS, China. publicCMS v4.0 contains a security vulnerability that stems from a problem in the BAT file parameters. An attacker can exploit this vulnerability to execute arbitrary code...

PublicCMS suffers from a command execution vulnerability (CNVD-2021-70754)

PublicCMS is an open source JAVACMS system developed using the latest mainstream technology in 2021. PublicCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

CVE-2020-21333

Cross Site Scripting XSS vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case...

CVE-2020-21333

Cross Site Scripting XSS vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case...

Cross site scripting

Cross Site Scripting XSS vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case...

CVE-2020-21333

PublicCMS 4.0 is affected by a Cross Site Scripting (XSS) vulnerability that can allow an attacker to obtain an administrator cookie when an administrator reviews a submitted case. The issue is documented across multiple sources (NVD, RH, CVE listing, CNNVD, etc.) with the root cause described as...

CVE-2020-21333

Cross Site Scripting XSS vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case...

PublicCMS 跨站脚本漏洞

PublicCMS is an open source content management system CMS written in Java by PublicCMS China. A cross-site scripting vulnerability exists in PublicCMS. An attacker can exploit this vulnerability to obtain an administrator cookie when an administrator reviews a submission...

CVE-2020-21333: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case...

Command Execution Vulnerability in PublicCMS

PublicCMS is an open source content management system CMS written in Java. PublicCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

CVE-2018-18927

CVE-2018-18927 concerns PublicCMS V4.0 where an XSS vulnerability exists in the page_list attachment attribute. The issue arises when the value of the page_list "attached" field (often containing class="icon-globe icon-large") can be manipulated to inject script, as demonstrated by the statement:...

CVE-2018-18927

An issue was discovered in PublicCMS V4.0. It allows XSS by modifying the pagelist "attached" attribute which typically has 'class="icon-globe icon-large"' in its value, as demonstrated by an 'UPDATE sysmodule SET attached = "XSS" WHERE id="pagelist"' statement...

CVE-2018-18927

An issue was discovered in PublicCMS V4.0. It allows XSS by modifying the pagelist "attached" attribute which typically has 'class="icon-globe icon-large"' in its value, as demonstrated by an 'UPDATE sysmodule SET attached = "XSS" WHERE id="pagelist"' statement...

Design/Logic Flaw

An issue was discovered in PublicCMS V4.0. It allows XSS by modifying the pagelist "attached" attribute which typically has 'class="icon-globe icon-large"' in its value, as demonstrated by an 'UPDATE sysmodule SET attached = "XSS" WHERE id="pagelist"' statement...

CVE-2018-18927

An issue was discovered in PublicCMS V4.0. It allows XSS by modifying the pagelist "attached" attribute which typically has 'class="icon-globe icon-large"' in its value, as demonstrated by an 'UPDATE sysmodule SET attached = "XSS" WHERE id="pagelist"' statement...

CVE-2018-18927: Improper Neutralization of Input During Web Page Generation

An issue was discovered in PublicCMS V4.0. It allows XSS by modifying the pagelist "attached" attribute which typically has 'class="icon-globe icon-large"' in its value, as demonstrated by an 'UPDATE sysmodule SET attached = "XSS" WHERE id="pagelist"' statement...

CVE-2018-17368

An issue was discovered in PublicCMS V4.0.180825. For an invalid login attempt, the response length is different depending on whether the username is valid, which makes it easier to conduct brute-force attacks...

CVE-2018-17368

An issue was discovered in PublicCMS V4.0.180825. For an invalid login attempt, the response length is different depending on whether the username is valid, which makes it easier to conduct brute-force attacks...

Design/Logic Flaw

An issue was discovered in PublicCMS V4.0.180825. For an invalid login attempt, the response length is different depending on whether the username is valid, which makes it easier to conduct brute-force attacks...