106 matches found
CVE-2023-43952
SSCMS 7.2.2 was discovered to contain a stored cross-site scripting XSS vulnerability via the Material Management component...
CVE-2023-43953
SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Content Management component...
CVE-2023-43951
SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Column Management component...
CVE-2023-43951: Improper Neutralization of Input During Web Page Generation
SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Column Management component...
CVE-2023-43953: Improper Neutralization of Input During Web Page Generation
SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Content Management component...
CVE-2023-43952: Improper Neutralization of Input During Web Page Generation
SSCMS 7.2.2 was discovered to contain a stored cross-site scripting XSS vulnerability via the Material Management component...
CVE-2023-43952
SSCMS 7.2.2 was discovered to contain a stored cross-site scripting XSS vulnerability via the Material Management component...
PT-2023-29047 · Sscms · Sscms
Name of the Vulnerable Software and Affected Versions: SSCMS version 7.2.2 Description: A stored cross-site scripting XSS issue was found in the Material Management component. This allows for malicious scripts to be stored and executed on the system. Recommendations: For SSCMS version 7.2.2, upda...
PT-2023-29048 · Sscms · Sscms
Name of the Vulnerable Software and Affected Versions: SSCMS version 7.2.2 Description: A cross-site scripting XSS issue was found in the Content Management component. This type of issue allows attackers to inject malicious scripts into content from otherwise trusted websites. Recommendations: Fo...
PT-2023-29046 · Sscms · Sscms
Name of the Vulnerable Software and Affected Versions: SSCMS version 7.2.2 Description: A cross-site scripting XSS issue was found in the Column Management component. This type of issue allows attackers to inject malicious scripts into content from otherwise trusted websites. Recommendations: For...
Cross-site Scripting (XSS)
SSCMS is vulnerable to Cross-site Scripting XSS. The vulnerability exists because of the improper sanitization in the ajaxDivId argument in the Submit function of ActionsSearchController.Submit.cs, which allows an attacker to inject and execute malicious javascript through the...
CVE-2022-44299
SiteServerCMS 7.1.3 sscms is vulnerable to an Arbitrary File Read due to insufficient validation in ReadTextAsync, enabling leakage of sensitive files. Public reports describe a path/file-read vulnerability that can disclose data without user interaction over network access; exploitation details ...
CVE-2022-44299
SiteServerCMS 7.1.3 sscms has a file read vulnerability...
CVE-2022-44299: Improper Limitation of a Pathname to a Restricted Directory
SiteServerCMS 7.1.3 sscms has a file read vulnerability...
SSCMS-PluginShell
安装VisualStudio 2. 导入该项目 3. 修改Startup.cs文件中的IPAddress.Parse值 c using Microsoft.Extensions.DependencyInjection; using SSCMS.Advertisement.Abstractions; using SSCMS.Advertisement.Core; using SSCMS.Plugins; using System.Diagnostics; using System; using System.Text; using System.Net.Sockets; using...
Cross site scripting in SSCMS
siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting XSS...
GHSA-4QF6-VPJ8-P4R6 Cross site scripting in SSCMS
siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting XSS...
CVE-2022-30349
siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting XSS...
