CVE-2023-31714

CVE-2023-31714 - Chitor-CMS 1.1.2 Injeção SQL Pré-Autenticação Descoberto por msd0pe https://github.com/waqaskanju/Chitor-CMS Projeto por waqaskanju chitor1.1.py Corrigido desde o commit 69d3442 2023/04/13 Injeção SQL foi encontrada no endpoint /editschool.php?id= e não requer nenhuma autenticaçã...

PPress 安全漏洞

PPress is a Python based blog CMS system by yandaozi individual developer. A security vulnerability exists in PPress version 0.0.9, which originates from server-side template injection and could lead to the execution of arbitrary code...

CMSmap

This is a Python-based CMS Content Management System scanner called CMSmap. It is designed to automate the process of detecting security flaws in popular CMSs such as WordPress, Joomla, Drupal, and Moodle. The tool is still in its early stages and may contain bugs or flaws. The tool uses a...

Plone 5.0.5 Cross Site Scripting

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Plone 5.0.5 Fixed in: Hotfix 20170117 Fixed Version Link: https://plone.org/security/hotfix/20170117 Vendor Contact: [email protected] Vulnerability Type: XSS Remote Exploitable: Yes Reported to vendor: 09/05/2016...

Mezzanine 4.2.0 - Cross-Site Scripting

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Mezzanine 4.2.0 Fixed in: 4.2.1 Fixed Version Link: https://github.com/stephenmcd/mezzanine/releases/tag/4.2.1 Vendor Website: http://mezzanine.jupo.org/ Vulnerability Type: XSS Remote Exploitable: Yes Reported to vendor:...