CVE-2023-43878-RiteCMS-Stored-XSS---MainMenu

Rite CMS v3.0 多个存储型 XSS 作者：Sergio 描述： Rite CMS 3.0 存在一个多存储型跨站脚本（XSS）漏洞，攻击者可以通过在管理菜单的“主菜单 - 项目”中注入精心构造的 payload 来执行任意代码。 攻击向量： AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L POC： 登录面板后，我们进入“管理 - 菜单 - 主菜单”部分。 点击“添加项目”按钮，然后在“名称”、“标题”、“链接”和“快捷键”字段中添加 XSS payload。 XSS Payload： '" 在以下图片中，您可以看到嵌入的代码在主网页上执行了 payloa...

CVE-2023-43877-RiteCMS-Stored-XSS---Home

Rite CMS v3.0 多个存储型XSS 作者：Sergio 描述： Rite CMS 3.0 受多个跨站脚本（XSS）存储型漏洞影响，攻击者可通过在管理菜单的首页字段中精心构造载荷来执行任意代码。该载荷将在主页面中执行，与用户会话无关，因此其他用户访问主页时也会执行该载荷。 攻击向量： AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L POC： 登录面板后，我们进入"管理 - 首页"部分，或者创建一个新页面并添加载荷。 我们编辑正文配置，在其中添加XSS载荷。由于有多个字段且只有警告输出不同，我指出其中一个载荷： XSS载荷： '"...

CVE-2023-43879-RiteCMS-Stored-XSS---GlobalContent

Rite CMS v3.0 多个存储型XSS漏洞 作者：Sergio 描述： Rite CMS 3.0 存在一个存储型跨站脚本（XSS）漏洞，攻击者可以通过在管理菜单的全局内容块中注入精心构造的有效载荷来执行任意代码。 攻击向量： AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L POC： 登录面板后，转到"管理 - 全局内容块 - 主页"。 编辑正文配置，在其中添加XSS有效载荷。 XSS 有效载荷： '" 保存后，将看到XSS弹窗出现。...

CVE-2023-43878

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a crafted payload into the Main Menu Items in the Administration Menu...

CVE-2023-43879

Rite CMS 3.0 has a Cross-Site scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu...

CVE-2025-67174

A local file inclusion LFI vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal in the adminlanguagefile and defaultpagelanguagefile in the admin.php component...

EUVD-2023-48239

Malicious code in bioql PyPI...

EUVD-2023-48240

Malicious code in bioql PyPI...

CVE-2023-43877

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

RiteCMS 跨站脚本漏洞

RiteCMS is an open source content management system based on PHP and SQLite. RiteCMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the component mainmenu/editsection, which can be exploited by an attacker to...

CVE-2023-43877

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

Cross site scripting

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

CVE-2023-43877

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

CVE-2023-43877

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

CVE-2023-43877

CVE-2023-43877 concerns Rite CMS 3.0, where multiple Cross-Site Scripting (XSS) vulnerabilities allow an attacker to execute arbitrary code by crafting payloads in the Home Page field of the Administration menu (also referenced for related CVE-2023-43878). The Red Hat entry notes a similar issue ...

CVE-2023-43877

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

CVE-2023-43877: Improper Neutralization of Input During Web Page Generation

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

CVE-2023-43879

Rite CMS 3.0 has a Cross-Site scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu...

CVE-2023-43878

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a crafted payload into the Main Menu Items in the Administration Menu...

CVE-2023-43878

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a crafted payload into the Main Menu Items in the Administration Menu...