86 matches found
CVE-2021-42654
SiteServer CMS V5.1 is affected by an unrestricted upload of a file with dangerous type getshell, which could be used to execute arbitrary code...
CVE-2021-42654
SiteServer CMS V5.1 is affected by an unrestricted upload of a file with dangerous type getshell, which could be used to execute arbitrary code...
CVE-2021-42655
SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability...
CVE-2021-42656
SiteServer CMS V6.15.51 is affected by a Cross Site Scripting XSS vulnerability...
CVE-2021-42656
SiteServer CMS V6.15.51 is affected by a Cross Site Scripting XSS vulnerability...
Sql injection
SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability...
Design/Logic Flaw
SiteServer CMS V5.1 is affected by an unrestricted upload of a file with dangerous type getshell, which could be used to execute arbitrary code...
Cross site scripting
SiteServer CMS V6.15.51 is affected by a Cross Site Scripting XSS vulnerability...
CVE-2021-42656
CVE-2021-42656 affects SiteServer CMS v6.15.51 and is a Cross-Site Scripting (XSS) vulnerability. Connected sources indicate the XSS appears in the TbItemName parameter (per the Nessus plugin note about SiteServer CMS 6.15.51) and reference the CVE-2021-42656 entry (also listing related CVE-2022-...
CVE-2021-42655
SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability...
CVE-2021-42654
SiteServer CMS V5.1 is affected by an unrestricted upload of a file with dangerous type getshell, which could be used to execute arbitrary code...
CVE-2021-42654
SiteServer CMS
SiteServer CMS 跨站脚本漏洞
SiteServer CMS is an open source Content Management System CMS from China's BioRenewable Software Technology Development Company. A security vulnerability exists in SiteServer CMS version V6.15.51, which is caused by a cross-site scripting issue...
SiteServer CMS SQL注入漏洞
SiteServer CMS is a content management system CMS from Beijing Bailong Thousand Domain Software Technology Development Company. SQL injection vulnerability exists in SiteServer CMS V6.15.51. An attacker can exploit this vulnerability to perform sql injection...
RCE in SiteServer CMS
SiteServer CMS v7.x, which SiteServer UI relies on, allows attackers to execute arbitrary code via a crafted plug-in...
GHSA-Q469-J32F-H7VM RCE in SiteServer CMS
SiteServer CMS v7.x, which SiteServer UI relies on, allows attackers to execute arbitrary code via a crafted plug-in...
CVE-2022-28118
SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in...
CVE-2022-28118
SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in...