PT-2019-12267 · Soy · Soy Cms

Name of the Vulnerable Software and Affected Versions: SOY CMS version 3.0.2 Description: The issue allows remote attackers to execute arbitrary PHP code via a ?php substring in the second text box. It is based on an assumption that the content is made editable on its own. Recommendations: For SO...

Nippon Institute of Agroinformatics SOY CMS with installer cross-site scripting vulnerability

Nippon Institute of Agroinformatics SOY CMS with installer is a web content management system CMS from Nippon Institute of Agroinformatics, Japan. The system supports the creation of websites, development of software based on A/B testing, optimization of websites, etc. installer is one of the...

CVE-2017-2163

Directory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated attackers to read arbitrary files via shopid...

Directory traversal

Directory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated attackers to read arbitrary files via shopid...

Cross site scripting

Cross-site scripting vulnerability in SOY CMS with installer 1.8.12 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2164

Cross-site scripting vulnerability in SOY CMS with installer 1.8.12 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2163

Directory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated attackers to read arbitrary files via shopid...

CVE-2017-2164

Cross-site scripting vulnerability in SOY CMS with installer 1.8.12 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2163

Directory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated attackers to read arbitrary files via shopid...

CVE-2017-2164

Cross-site scripting vulnerability in SOY CMS with installer 1.8.12 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2164

CVE-2017-2164 corresponds to a cross-site scripting vulnerability in the installer component of SOY CMS (1.8.12 and earlier). The root cause is a flaw in processing parameters (CWE-79) in the installer, enabling a remote attacker to cause arbitrary web-script or HTML execution in a user’s browser...

CVE-2017-2163

CVE-2017-2163 affects SOY CMS versions 1.8.1–1.8.12. A directory traversal flaw arises from flawed processing of the shop_id parameter, allowing authenticated attackers to read arbitrary files on the server and potentially execute arbitrary PHP code. Remediation is to update to the latest SOY CMS...

The installer of SOY CMS vulnerable to cross-site scripting

Overview SOY CMS provided by Nippon Institute of Agroinformatics Ltd. is a Contents Management System CMS. The installer of SOY CMS contains a cross-site scripting vulnerability CWE-79 due to a flaw in processing parameter. Satoshi Ogawa of Mitsui Bussan Secure Directions,Inc. reported this...

JVN#51978169: The installer of SOY CMS vulnerable to cross-site scripting

SOY CMS provided by Nippon Institute of Agroinformatics Ltd. is a Contents Management System CMS. The installer of SOY CMS contains a cross-site scripting vulnerability CWE-79 due to a flaw in processing parameter. Impact When a user accesses a malicious page that leads to where the SOY CMS...

JVN#51819749: SOY CMS vulnerable to directory traversal

SOY CMS provided by Nippon Institute of Agroinformatics Ltd. is a Contents Management System CMS. SOY CMS contains a directory traversal vulnerability CWE-22 due to a flaw in processing shopid parameter. Impact An authenticated attacker may execute arbitrary PHP code on the server. Solution Updat...

CVE-2014-1998

Cross-site scripting XSS vulnerability in Nippon Institute of Agroinformatics SOY CMS 1.4.0c and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Nippon Institute of Agroinformatics SOY CMS 1.4.0c and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-1998

CVE-2014-1998 affects Nippon Institute of Agroinformatics SOY CMS; SOY CMS Ver. 1.4.0c and earlier are vulnerable to a cross-site scripting (XSS) flaw allowing remote attackers to run arbitrary scripts via unspecified vectors. Root cause: unvalidated/inadequate sanitization in user-facing input p...

CVE-2014-1998

Cross-site scripting XSS vulnerability in Nippon Institute of Agroinformatics SOY CMS 1.4.0c and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

JVN#54650130: SOY CMS vulnerable to cross-site scripting

SOY CMS provided by Nippon Institute of Agroinformatics Ltd. is an open source content management system CMS. SOY CMS contains a cross-site scripting vulnerability. Impact If a user views a malicious page while logged in, an arbitrary script may be executed on the user's web browser. Solution App...