30 matches found
SofaWiki 代码问题漏洞
SofaWiki is a PHP-based CMS. A security vulnerability exists in SofaWiki 3.8.9 and earlier versions, which stems from a file upload vulnerability that can lead to the execution of command...
CVE-2023-29721
CVE-2023-29721 affects SofaWiki versions up to 3.8.9. A file-upload vulnerability allows command execution, per multiple connected records (e.g., Red Hat, NVD, CNNVD). The CVSS indicates critical impact with network attack vector and no user interaction required. Remediation guidance found in PT-...
SofaWiki Cross-Site Scripting Vulnerability
SofaWiki is a CMS built on PHP. A cross-site scripting vulnerability exists in SofaWiki 3.8.9 and earlier versions, which stems from the lack of effective filtering and escaping of user-supplied data in index.php, and can be exploited by an attacker to execute arbitrary web script or HTML by...
CVE-2023-29720
SofaWiki =3.8.9 is vulnerable to Cross Site Scripting XSS via index.php...
CVE-2023-29720
SofaWiki =3.8.9 is vulnerable to Cross Site Scripting XSS via index.php...
Cross site scripting
SofaWiki =3.8.9 is vulnerable to Cross Site Scripting XSS via index.php...
CVE-2023-29720
SofaWiki =3.8.9 is vulnerable to Cross Site Scripting XSS via index.php...
SofaWiki 跨站脚本漏洞
SofaWiki is a CMS built on PHP. A cross-site scripting vulnerability exists in SofaWiki 3.8.9 and earlier versions, which stems from the lack of effective filtering and escaping of user-supplied data in index.php, and can be exploited by an attacker to execute arbitrary web script or HTML by...
