Lucene search
+L

5 matches found

osv_cve
osv_cve
•added 2023/09/17 2:15 a.m.•20 views

CVE-2023-5015

A vulnerability was found in UCMS 1.4.7. It has been classified as problematic. Affected is an unknown function of the file ajax.php?do=strarraylist. The manipulation of the argument strdefault leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

6.1CVSS3.8AI score0.00484EPSS
SaveExploits1References3
Mend
Mend
•added 2023/09/17 1:31 a.m.•8 views

CVE-2023-5015

A vulnerability was found in UCMS 1.4.7. It has been classified as problematic. Affected is an unknown function of the file ajax.php?do=strarraylist. The manipulation of the argument strdefault leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

6.1CVSS0.00484EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/17 12:00 a.m.•12 views

CVE-2023-5015: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in UCMS 1.4.7. It has been classified as problematic. Affected is an unknown function of the file ajax.php?do=strarraylist. The manipulation of the argument strdefault leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

6.1CVSS3.8AI score0.00484EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/09/16 12:00 a.m.•10 views

PT-2023-31484

Name of the Vulnerable Software and Affected Versions UCMS version 1.4.7 Description A problematic issue has been identified, allowing for cross-site scripting through the manipulation of the strdefault argument in an unknown function of the file "ajax.php?do=strarraylist". This can be exploited...

6.1CVSS5.3AI score0.00484EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2023/09/16 12:00 a.m.•26 views

UCMS Cross-Site Scripting Vulnerability

UCMS is a content management system written in PHP. A cross-site scripting vulnerability exists in UCMS version 1.4.7, which originates from an unknown function in the file ajax.php?do=strarraylist, which leads to cross-site scripting via the parameter strdefault...

6.1CVSS6AI score0.00484EPSS
SaveExploits1References5
Rows per page
Query Builder