355 matches found
CVE-2020-29458
Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem...
CVE-2020-29458
Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem...
Cross site request forgery (csrf)
Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem...
CVE-2020-29458
CVE-2020-29458 affects Textpattern CMS, specifically version 4.6.2, with a cross-site request forgery (CSRF) vulnerability in the prefs subsystem. The available connected sources confirm the affected product and that the root cause is CSRF via the prefs subsystem, with no detailed exploit vectors...
CVE-2020-29458
Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem...
Textpattern Cms 跨站请求伪造漏洞
Textpattern CMS is a free open source content management system based on PHP and MySQL. A cross-site request forgery vulnerability exists in Textpattern CMS 4.6.2. An attacker can exploit this vulnerability to conduct cross-site request forgery attacks via the prefs subsystem...
TextPattern CMS 4.8.3 - Remote Code Execution (Authenticated)
!/usr/bin/python3 Exploit Title: TextPattern = 4.8.3 - Authenticated Remote Code Execution via Unrestricted File Upload Google Dork: N/A Date: 16/10/2020 Exploit Author: Michele '0blio' Cisternino Vendor Homepage: https://textpattern.com/ Software Link: https://github.com/textpattern/textpattern...
Textpattern CMS 4.6.2 - Cross-site Request Forgery
Exploit Title: Textpattern CMS 4.6.2 - Cross-site Request Forgery Exploit Author: Alperen Ergel Contact: @alprenae Software Homepage: https://textpattern.com/ Version : 4.6.2 Tested on: windows 10 / xammp Category: WebApp Google Dork: intext:"Published with Textpattern CMS" Date: 2020-10-29...
Textpattern CMS 4.6.2 - 'body' Persistent Cross-Site Scripting
Exploit Title: Textpattern CMS 4.6.2 - 'body' Persistent Cross-Site Scripting Exploit Author: Alperen Ergel Web Site: https://alperenae.gitbook.io/ Software Homepage: https://textpattern.com/ Version : 4.6.2 Tested on: windows 10 / xammp Category: WebApp Google Dork: intext:"Published with...
Textpattern CMS 4.6.2 Cross Site Scripting
Exploit Title: Textpattern CMS 4.6.2 - 'body' Persistent Cross-Site Scripting Exploit Author: Alperen Ergel Web Site: https://alperenae.gitbook.io/ Software Homepage: https://textpattern.com/ Version : 4.6.2 Tested on: windows 10 / xammp Category: WebApp Google Dork: intext:"Published with...
CVE-2015-8033
In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account...
CVE-2015-8032
In Textpattern 4.5.7, an unprivileged author can change an article's markup setting...
Design/Logic Flaw
In Textpattern 4.5.7, an unprivileged author can change an article's markup setting...
Design/Logic Flaw
In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account...
CVE-2015-8033
In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account...
CVE-2015-8033
The CVE-2015-8033 entry concerns Textpattern 4.5.7, where the password-reset feature does not securely tether a password hash to a user account. The NVD data lists CVSS v3.1 base metrics: 5.3 (Medium) with Network attack vector, Low attack complexity, no privileges required, no user interaction, ...
CVE-2015-8032
In Textpattern 4.5.7, an unprivileged author can change an article's markup setting...
CVE-2015-8032
CVE-2015-8032 affects Textpattern 4.5.7. The vulnerability allows an unprivileged author to change an article's markup setting, indicating a permission/ownership flaw in how article markup is managed. The provided sources do not specify an exploit method or a patch/mitigation. The impact is limit...
File upload vulnerability in tx***_fi***.php file in TextpatternCMS backend
TextpatternCMS is a content management system written in PHP. A file upload vulnerability exists in the txfi.php file in the backend of TextpatternCMS. It allows an attacker to upload a webshell and gain server privileges...
