Cross-site Scripting Vulnerability in Discuz!

Discuz! is a very popular Web forum program in the Chinese community. A cross-site scripting vulnerability exists in Discuz! X3.4, which stems from the failure of admincp/admincpsetting.php and template\default\common\footer.htm to properly handle the statcode field, which can be exploited to...

Code injection

Discuz! X3.4 allows XSS via admin.php because admincp/admincpsetting.php and template\default\common\footer.htm mishandles statcode field from third-party stats code...

CVE-2018-19464: Improper Neutralization of Input During Web Page Generation

Discuz! X3.4 allows XSS via admin.php because admincp/admincpsetting.php and template\default\common\footer.htm mishandles statcode field from third-party stats code...

PT-2018-14969

Name of the Vulnerable Software and Affected Versions Discuz! X3.4 Description The issue arises from the mishandling of the statcode field from third-party stats code in admincp/admincp setting.php and templatedefaultcommonfooter.htm, allowing for XSS via admin.php. Recommendations For Discuz!...

WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2019-09138)

WUZHI CMS is five fingers WUZHI company based on PHP and MySQL open source content management system CMS. WUZHI CMS 4.1.0 there is a cross-site scripting vulnerability , attackers can index.php?m=core&f=set&v=basic formstatcode parameter to exploit the vulnerability for cross-site scripting attac...

CVE-2018-16350

WUZHI CMS 4.1.0 has XSS via the index.php?m=core&f=set&v=basic formstatcode parameter...

CVE-2018-16350

WUZHI CMS 4.1.0 has XSS via the index.php?m=core&f=set&v=basic formstatcode parameter...

CVE-2018-16350

WUZHI CMS 4.1.0 has XSS via the index.php?m=core&f=set&v=basic formstatcode parameter...

CVE-2018-16350

CVE-2018-16350 affects WUZHI CMS 4.1.0 and is described as a cross-site scripting (XSS) vulnerability in the form parameter: index.php?m=core&f=set&v=basic form[statcode]. The connected documents confirm the vulnerability location (the set/basic form[statcode] field) and the product version, but ...

CVE-2018-16350: Improper Neutralization of Input During Web Page Generation

WUZHI CMS 4.1.0 has XSS via the index.php?m=core&f=set&v=basic formstatcode parameter...

PT-2018-13510

Name of the Vulnerable Software and Affected Versions WUZHI CMS version 4.1.0 Description The issue is related to a form parameter in a specific PHP file, allowing for XSS attacks. The vulnerable parameter is statcode in the form on the page index.php?m=core&f=set&v=basic. Recommendations For WUZ...