SourceCodester Simple Food Website SQL注入漏洞

SourceCodester Simple Food Website is a CMS by SourceCodester, Inc. developed using PHP and MySQL database. sourcecodester Basic Shopping Cart is vulnerable to SQL injection, which can be exploited by attackers to bypass authentication Become an administrator...

[SECURITY] Fedora 34 Update: ruby-3.0.2-149.fc34

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

CVE-2021-34166

CVE-2021-34166 concerns Sourcecodester Simple Food Website 1.0, where a SQL injection vulnerability in the application enables a remote attacker to bypass authentication and gain admin privileges. The NVD entry documents a high/critical impact profile (CVSS v3.1: 9.8, sequence NETWORK/LOW complex...

CVE-2021-34166

A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin...

CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2021-57426)

CMS Made Simple is a simple and easy-to-use content management system developed using PHP, MySQL, and Smarty template engine. version 2.2.14 of CMS Made Simple contains a cross-site scripting vulnerability. The vulnerability can be exploited by attackers via the "Extra" function in the "News...

CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2021-57425)

CMS Made Simple is a simple and easy-to-use content management system developed using PHP, MySQL and Smarty template engine.A cross-site scripting vulnerability exists in CMS Made Simple version 2.2.14. The vulnerability can be exploited by attackers to conduct cross-site scripting attacks via th...

CVE-2020-23240

Cross Site Scripting XSS vulnerablity in CMS Made Simple 2.2.14 via the Logic field in the Content Manager feature...

CVE-2020-23241

Cross Site Scripting XSS vulnerability in CMS Made Simple 2.2.14 in "Extra" via 'News Article" feature...

CVE-2020-23241

Cross Site Scripting XSS vulnerability in CMS Made Simple 2.2.14 in "Extra" via 'News Article" feature...

CVE-2020-23240

Cross Site Scripting XSS vulnerablity in CMS Made Simple 2.2.14 via the Logic field in the Content Manager feature...

Cross site scripting

Cross Site Scripting XSS vulnerablity in CMS Made Simple 2.2.14 via the Logic field in the Content Manager feature...

Cross site scripting

Cross Site Scripting XSS vulnerability in CMS Made Simple 2.2.14 in "Extra" via 'News Article" feature...

CVE-2020-23241

Cross Site Scripting XSS vulnerability in CMS Made Simple 2.2.14 in "Extra" via 'News Article" feature...

CVE-2020-23241

CMS Made Simple 2.2.14 is affected by a Cross-Site Scripting (XSS) vulnerability in the “Extra” via the News > Article feature. The issue is documented across multiple sources, indicating the vulnerable component is the News > Article path in the CMS Made Simple 2.2.14 implementation, with ...

CVE-2020-23240

Cross Site Scripting XSS vulnerablity in CMS Made Simple 2.2.14 via the Logic field in the Content Manager feature...

CVE-2020-23240

CMS Made Simple 2.2.14 is vulnerable to Cross-Site Scripting via the Logic field in the Content Manager (XSS). The issue is documented across NVD/CVE records and mirrored by Red Hat and CNVD entries. The OpenVAS entry notes a WillNotFix remediation in its data; no patch/version fix is provided in...

Simple Banner < 2.10.4 - Authenticated Stored XSS

The plugin does not sanitise and escape one of its settings, allowing high privilege users such as admin to use Cross-Site Scripting payload even when the unfilteredhtml capability is disallowed. Put the following payload in the Simple Banner Text setting of the plugin: The XSS will be triggered ...

CMS Made Simple 跨站脚本漏洞

CMS Made Simple is a simple and easy-to-use content management system developed using PHP, MySQL, and Smarty template engine. version 2.2.14 of CMS Made Simple contains a cross-site scripting vulnerability. The vulnerability can be exploited by attackers via the "Extra" function in the "News...

WordPress Simple Banner plugin <= 2.10.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Asif Nawaz Minhas in WordPress Simple Banner plugin versions = 2.10.3. Solution Update the WordPress Simple Banner plugin to the latest available version at least 2.10.4...

Simple Banner < 2.10.4 - Authenticated Stored XSS

The plugin does not sanitise and escape one of its settings, allowing high privilege users such as admin to use Cross-Site Scripting payload even when the unfilteredhtml capability is disallowed. PoC Put the following payload in the Simple Banner Text setting of the plugin: The XSS will be...