CVE-2022-3464

CVE-2022-3464 在 puppyCMS 5.1 及之前版本中发现了一个被归类为有问题的漏洞。该漏洞影响文件 /admin/settings.php 的未知部分。对参数 sitename 的操作导致了跨站脚本攻击。攻击可能远程发起。此漏洞的相关标识符是 VDB-210699。 authentication| complexity| vector ---|---|--- not available| not available| not available...

EUVD-2020-10802

Malware in sbrugna...

EUVD-2018-7704

Malware in sbrugna...

EUVD-2020-10803

Malware in sbrugna...

EUVD-2020-10801

Malware in sbrugna...

EUVD-2022-42836

Malicious code in bioql PyPI...

CVE-2022-3464

A vulnerability classified as problematic has been found in puppyCMS up to 5.1. This affects an unknown part of the file /admin/settings.php. The manipulation of the argument sitename leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this...

CVE-2020-18889

Cross Site Request Forgery CSRF vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/settings.php...

CVE-2020-18888

Arbitrary File Deletion vulnerability in puppyCMS v5.1 allows remote malicious attackers to delete the file/folder via /admin/functions.php...

CVE-2020-18890

Rmote Code Execution RCE vulnerability in puppyCMS v5.1 due to insecure permissions, which could let a remote malicious user getshell via /admin/functions.php...

CVE-2022-3464

A vulnerability classified as problematic has been found in puppyCMS up to 5.1. This affects an unknown part of the file /admin/settings.php. The manipulation of the argument sitename leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this...

CVE-2022-3464

A vulnerability classified as problematic has been found in puppyCMS up to 5.1. This affects an unknown part of the file /admin/settings.php. The manipulation of the argument sitename leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this...

Cross site scripting

A vulnerability classified as problematic has been found in puppyCMS up to 5.1. This affects an unknown part of the file /admin/settings.php. The manipulation of the argument sitename leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this...

puppyCMS 跨站脚本漏洞

puppetCMS is a software application. A flat file CMS. A security vulnerability exists in puppyCMS versions prior to 5.1, which originates in an unknown section of the file /admin/settings.php, where the action parameter sitename leads to cross-site scripting XSS...

CVE-2022-3464 puppyCMS settings.php cross site scripting

A vulnerability classified as problematic has been found in puppyCMS up to 5.1. This affects an unknown part of the file /admin/settings.php. The manipulation of the argument sitename leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this...

CVE-2022-3464

PuppyCMS

PT-2022-22262 · Puppycms · Puppycms

Name of the Vulnerable Software and Affected Versions: puppyCMS versions up to 5.1 Description: A problematic issue has been found in puppyCMS, affecting an unknown part of the file /admin/settings.php. The manipulation of the site name argument leads to cross-site scripting. It is possible to...

The vulnerability in the implementation of the admin/functions.php script of the PuppyCMS CMS system allows a perpetrator to execute arbitrary code.

The vulnerability of the admin/functions.php implementation in the PuppyCMS CMS system is related to incorrect permission storage. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Command Execution Vulnerability in puppyCMS 5.1

puppetCMS is a small, simple, flat file CMS written in PHP. A command execution vulnerability exists in puppyCMS version 5.1. An attacker can exploit this vulnerability to gain server privileges...

PuppyCMS Arbitrary File Deletion Vulnerability

puppyCMS is a very simple, flat file CMS. An arbitrary file deletion vulnerability exists in puppyCMS version 5.1. The vulnerability stems from the fact that there is no path to any restriction. A remote attacker can exploit this vulnerability to delete files/folders via /admin/functions.php...