CVE-2023-2862

SiteServer CMS up to version 7.2.1 contains a cross-site scripting vulnerability in the /api/stl/actions/search endpoint. The issue stems from manipulating the ajaxDivId parameter in an unknown function, allowing remote exploitation. Public disclosure of exploits is indicated, and a patch is reco...

CVE-2023-2862 SiteServer CMS search cross site scripting

A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to launch the attack remotely. The exploit h...

CVE-2023-2862 SiteServer CMS search cross site scripting

A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to launch the attack remotely. The exploit h...

PT-2023-21852 · Unknown · Siteserver Cms

Name of the Vulnerable Software and Affected Versions: SiteServer CMS versions up to 7.2.1 Description: A problematic issue was found in the software, affecting an unknown function of the file /api/stl/actions/search. The manipulation of the ajaxDivId argument leads to cross-site scripting. It is...

SiteServer CMS 7.1.3 SQL Injection Vulnerability

According to its self-reported version number, the instance of SiteServer CMS hosted on the remote web server is version 7.1.3. It is, therefore, affected by a vulnerability which permits remote authenticated attackers to perform a sql injection against the api/admin/settings/sitesTables/ endpoin...

CVE-2022-44298

SiteServer CMS 7.1.3 is vulnerable to SQL Injection...

CVE-2022-44298

SiteServer CMS 7.1.3 is vulnerable to SQL Injection...

SiteServer CMS SQL注入漏洞

SiteServer CMS is an open-source content management system CMS from China's BioRenewable Software Technology Development Company. A security vulnerability exists in SiteServer CMS version 7.1.3, which is caused by SQL injection...

CVE-2022-44298

SiteServer CMS 7.1.3 is vulnerable to SQL Injection...

CVE-2022-44298

SiteServer CMS 7.1.3 is vulnerable to SQL Injection...

CVE-2022-44297

SiteServer CMS 7.1.3 has a SQL injection vulnerability the background...

Sql injection

SiteServer CMS 7.1.3 has a SQL injection vulnerability the background...

CVE-2022-44297

SiteServer CMS 7.1.3 has a SQL injection vulnerability the background...

CVE-2022-44297

SiteServer CMS 7.1.3 has a SQL injection vulnerability the background...

SiteServer CMS SQL注入漏洞

SiteServer CMS is an open source content management system CMS developed by China Billion Software Technology Development Company. A security vulnerability exists in SiteServer CMS version 7.1.3, which is caused by SQL injection in the backend...

CVE-2022-44297

SiteServer CMS 7.1.3 contains a backend SQL injection vulnerability. The CVE entry lists a critical impact (CVSS v3.1: 9.8) with network attack vector, no authentication, and full confidentiality, integrity, and availability impacts, as described in the initial data. Connected documents do not pr...

GHSA-2XWP-7J3P-C78X Cross site scripting in SiteServer CMS

SiteServer CMS V6.15.51 is affected by a Cross Site Scripting XSS vulnerability...

GHSA-5XR5-V2H7-2W7W SQL injection in SiteServer CMS

SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability...

Cross site scripting in SiteServer CMS

SiteServer CMS V6.15.51 is affected by a Cross Site Scripting XSS vulnerability...

GHSA-FF4W-8CHR-W2X9 SiteServer CMS RCE via unsafe file upload

A issue was discovered in SiteServer CMS prior to version 6.12. It allows remote attackers to execute arbitrary code because an administrator can add the permitted file extension .aassp, which is converted to .asp because the "as" substring is deleted...