TextPattern CMS 4.8.7 - Stored Cross-Site Scripting (XSS) Vulnerability

Exploit Title: TextPattern CMS 4.8.7 - Stored Cross-Site Scripting XSS Exploit Author: Mert Daş email protected Software Link: https://textpattern.com/filedownload/113/textpattern-4.8.7.zip Software web: https://textpattern.com/ Tested on: Server: Xampp TextPattern is prone to a cross-site...

TextPattern CMS 4.8.7 Cross Site Scripting

Exploit Title: TextPattern CMS 4.8.7 - Stored Cross-Site Scripting XSS Date: 2021/09/06 Exploit Author: Mert Daş [email protected] Software Link: https://textpattern.com/filedownload/113/textpattern-4.8.7.zip Software web: https://textpattern.com/ Tested on: Server: Xampp TextPattern is pron...

TextPattern CMS 4.8.7 - Stored Cross-Site Scripting (XSS)

Exploit Title: TextPattern CMS 4.8.7 - Stored Cross-Site Scripting XSS Date: 2021/09/06 Exploit Author: Mert Daş [email protected] Software Link: https://textpattern.com/filedownload/113/textpattern-4.8.7.zip Software web: https://textpattern.com/ Tested on: Server: Xampp TextPattern is pron...

Textpattern CMS suffers from a file upload vulnerability (CNVD-2021-34232)

Textpattern CMS is a free open source content management system based on PHP and MySQL. An arbitrary file upload vulnerability exists in Textpattern CMS version 4.8.5, which can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in Textpattern CMS

Textpattern CMS is a free open source content management system based on PHP and MySQL. Textpattern CMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Textpattern CMS 4.9.0-dev Cross Site Scripting

Exploit Title: Textpattern CMS 4.9.0-dev - 'Excerpt' Persistent Cross-Site Scripting XSS Date: 2021-03-04 Exploit Author: Tushar Vaidya Vendor Homepage: https://textpattern.com Software Link: https://textpattern.com/start Version: v 4.9.0-dev Tested on: Windows Steps-To-Reproduce: 1. Login into...

Textpattern CMS 4.8.3 Remote Code Execution

Exploit Title: Textpattern 4.8.3 - Remote code execution Authenticated 2 Date: 03/03/2021 Exploit Author: Ricardo Ruiz @ricardojoserf Vendor Homepage: https://textpattern.com/ Software Link: https://textpattern.com/start Version: Previous to 4.8.3 Tested on: CentOS, textpattern 4.5.7 and 4.6.0...

Textpattern CMS 4.8.4 - (Comments) Persistent Cross-Site Scripting Vulnerability

Exploit Title: Textpattern CMS 4.8.4 - 'Comments' Persistent Cross-Site Scripting XSS Exploit Author: Tushar Vaidya Vendor Homepage: https://textpattern.com Software Link: https://textpattern.com/start Version: v 4.8.4 Tested on: Windows Steps-To-Reproduce: 1. Login into Textpattern CMS admin...

Textpattern CMS 4.8.4 Cross Site Scripting

Exploit Title: Textpattern CMS 4.8.4 - 'Comments' Persistent Cross-Site Scripting XSS Date: 2021-03-04 Exploit Author: Tushar Vaidya Vendor Homepage: https://textpattern.com Software Link: https://textpattern.com/start Version: v 4.8.4 Tested on: Windows Steps-To-Reproduce: 1. Login into...

Textpattern CMS 4.9.0-dev - (Excerpt) Persistent Cross-Site Scripting Vulnerability

Exploit Title: Textpattern CMS 4.9.0-dev - 'Excerpt' Persistent Cross-Site Scripting XSS Date: 2021-03-04 Exploit Author: Tushar Vaidya Vendor Homepage: https://textpattern.com Software Link: https://textpattern.com/start Version: v 4.9.0-dev Tested on: Windows Steps-To-Reproduce: 1. Login into...

Textpattern CMS 4.9.0-dev - 'Excerpt' Persistent Cross-Site Scripting (XSS)

Exploit Title: Textpattern CMS 4.9.0-dev - 'Excerpt' Persistent Cross-Site Scripting XSS Date: 2021-03-04 Exploit Author: Tushar Vaidya Vendor Homepage: https://textpattern.com Software Link: https://textpattern.com/start Version: v 4.9.0-dev Tested on: Windows Steps-To-Reproduce: 1. Login into...

Textpattern CMS 4.8.4 - 'Comments' Persistent Cross-Site Scripting (XSS)

Exploit Title: Textpattern CMS 4.8.4 - 'Comments' Persistent Cross-Site Scripting XSS Date: 2021-03-04 Exploit Author: Tushar Vaidya Vendor Homepage: https://textpattern.com Software Link: https://textpattern.com/start Version: v 4.8.4 Tested on: Windows Steps-To-Reproduce: 1. Login into...

Textpattern CMS Cross-Site Request Forgery Vulnerability (CNVD-2020-68862)

Textpattern CMS is a free open source content management system based on PHP and MySQL. A cross-site request forgery vulnerability exists in Textpattern CMS 4.6.2. An attacker can exploit this vulnerability to conduct cross-site request forgery attacks via the prefs subsystem...

CVE-2020-29458

Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem...

CVE-2020-29458

Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem...

Cross site request forgery (csrf)

Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem...

CVE-2020-29458

Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem...

CVE-2020-29458

CVE-2020-29458 affects Textpattern CMS, specifically version 4.6.2, with a cross-site request forgery (CSRF) vulnerability in the prefs subsystem. The available connected sources confirm the affected product and that the root cause is CSRF via the prefs subsystem, with no detailed exploit vectors...

CVE-2020-29458: Cross-Site Request Forgery (CSRF)

Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem...

PT-2020-17169

Name of the Vulnerable Software and Affected Versions Textpattern CMS version 4.6.2 Description The issue allows for Cross-Site Request Forgery CSRF attacks via the prefs subsystem. This means an attacker could potentially trick a user into performing unintended actions on the system...