CVE-2024-0426: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in ForU CMS up to 2020-06-23. This issue affects some unknown processing of the file admin/cmstemplate.php. The manipulation of the argument tname/tpath leads to sql injection. The attack may be initiated remotely. The exploit has...

MacCMS Cross-Site Scripting Vulnerability

Maccms is a PHP-based content management system CMS for film and television. A cross-site scripting vulnerability exists in the inc/config/cache.php file in Maccms version 8.0, which stems from the incorrect handling of the 'keywords' parameter in the template/paody/html/vodtype.html file and the...

CVE-2018-8767: Improper Neutralization of Input During Web Page Generation

joyplus-cms 1.6.0 has XSS in manager/adminajax.php?action=save&tab=prevodtype via the tname parameter...