63 matches found
EUVD-2017-15960
Malware in sbrugna...
EUVD-2025-2007
Malicious code in bioql PyPI...
EUVD-2023-43103
Malicious code in bioql PyPI...
EUVD-2023-43100
Malicious code in bioql PyPI...
EUVD-2023-43102
Malicious code in bioql PyPI...
EUVD-2024-39147
Malicious code in bioql PyPI...
CVE-2025-1105
A vulnerability was found in SiberianCMS 4.20.6. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /app/sae/design/desktop/flat of the component HTTP GET Request Handler. The manipulation leads to cross site scripting. The attack may be launched...
CVE-2025-1105
A vulnerability was found in SiberianCMS 4.20.6. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /app/sae/design/desktop/flat of the component HTTP GET Request Handler. The manipulation leads to cross site scripting. The attack may be launched...
CVE-2025-1105 SiberianCMS HTTP GET Request flat cross site scripting
A vulnerability was found in SiberianCMS 4.20.6. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /app/sae/design/desktop/flat of the component HTTP GET Request Handler. The manipulation leads to cross site scripting. The attack may be launched...
CVE-2025-1105 SiberianCMS HTTP GET Request flat cross site scripting
A vulnerability was found in SiberianCMS 4.20.6. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /app/sae/design/desktop/flat of the component HTTP GET Request Handler. The manipulation leads to cross site scripting. The attack may be launched...
CVE-2025-1105
SiberianCMS 4.20.6 is affected by CVE-2025-1105 due to an issue in the HTTP GET Request Handler: the file /app/sae/design/desktop/flat can be manipulated to trigger cross-site scripting. The vulnerability arises from an unknown functionality in that handler, with remote exploitation and public di...
CVE-2025-1105: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SiberianCMS 4.20.6. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /app/sae/design/desktop/flat of the component HTTP GET Request Handler. The manipulation leads to cross site scripting. The attack may be launched...
PT-2025-5982
Name of the Vulnerable Software and Affected Versions SiberianCMS version 4.20.6 Description A problem was found in SiberianCMS, affecting some unknown functionality of the file /app/sae/design/desktop/flat of the component HTTP GET Request Handler. This leads to cross-site scripting. The attack...
SiberianCMS code injection vulnerability
SiberianCMS is an open source and free application manufacturing software from SiberianCMS Inc. A code injection vulnerability exists in SiberianCMS version 4.20.6, which originates in the file /app/sae/design/desktop/flat of the component HTTP GET request handler can lead to a cross-site scripti...
SiberianCMS SQL Injection Vulnerability (CNVD-2024-35164)
SiberianCMS is an enterprise-level content management system that offers a variety of features for creating and managing web content. SiberianCMS suffers from a SQL injection vulnerability that originates from the system failing to properly neutralize special elements in SQL commands. The...
CVE-2024-41702
SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...
CVE-2024-41702
SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...
CVE-2024-41702 SiberianCMS – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...
CVE-2024-41702
CVE-2024-41702 corresponds to a SiberianCMS SQL injection due to the system’s failure to properly neutralize special elements in SQL commands. CNVD-2024-35164 describes that the vulnerability allows an attacker to execute arbitrary SQL to obtain sensitive information or gain database control. Oth...
CVE-2024-41702 SiberianCMS – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...