CVE-2020-35854

Textpattern 4.8.4 (Textpattern CMS, PHP/MySQL) is affected by cross-site scripting (XSS) in the Body parameter. The connected data identifies the vulnerable component as the Body parameter handling but does not provide a root cause description beyond noting an XSS issue, nor any explicit exploita...

CVE-2020-35854

Textpattern 4.8.4 is affected by cross-site scripting XSS in the Body parameter...

Textpattern CMS Cross-Site Request Forgery Vulnerability (CNVD-2020-68862)

Textpattern CMS is a free open source content management system based on PHP and MySQL. A cross-site request forgery vulnerability exists in Textpattern CMS 4.6.2. An attacker can exploit this vulnerability to conduct cross-site request forgery attacks via the prefs subsystem...

CVE-2020-29458

Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem...

CVE-2020-29458

Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem...

Cross site request forgery (csrf)

Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem...

CVE-2020-29458

CVE-2020-29458 affects Textpattern CMS, specifically version 4.6.2, with a cross-site request forgery (CSRF) vulnerability in the prefs subsystem. The available connected sources confirm the affected product and that the root cause is CSRF via the prefs subsystem, with no detailed exploit vectors...

CVE-2020-29458

Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem...

Textpattern Cms 跨站请求伪造漏洞

Textpattern CMS is a free open source content management system based on PHP and MySQL. A cross-site request forgery vulnerability exists in Textpattern CMS 4.6.2. An attacker can exploit this vulnerability to conduct cross-site request forgery attacks via the prefs subsystem...

CVE-2020-29458: Cross-Site Request Forgery (CSRF)

Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem...

TextPattern CMS 4.8.3 - Remote Code Execution (Authenticated)

!/usr/bin/python3 Exploit Title: TextPattern = 4.8.3 - Authenticated Remote Code Execution via Unrestricted File Upload Google Dork: N/A Date: 16/10/2020 Exploit Author: Michele '0blio' Cisternino Vendor Homepage: https://textpattern.com/ Software Link: https://github.com/textpattern/textpattern...

Textpattern CMS 4.6.2 - Cross-site Request Forgery

Exploit Title: Textpattern CMS 4.6.2 - Cross-site Request Forgery Exploit Author: Alperen Ergel Contact: @alprenae Software Homepage: https://textpattern.com/ Version : 4.6.2 Tested on: windows 10 / xammp Category: WebApp Google Dork: intext:"Published with Textpattern CMS" Date: 2020-10-29...

Textpattern CMS 4.6.2 - 'body' Persistent Cross-Site Scripting

Exploit Title: Textpattern CMS 4.6.2 - 'body' Persistent Cross-Site Scripting Exploit Author: Alperen Ergel Web Site: https://alperenae.gitbook.io/ Software Homepage: https://textpattern.com/ Version : 4.6.2 Tested on: windows 10 / xammp Category: WebApp Google Dork: intext:"Published with...

Textpattern CMS 4.6.2 Cross Site Scripting

Exploit Title: Textpattern CMS 4.6.2 - 'body' Persistent Cross-Site Scripting Exploit Author: Alperen Ergel Web Site: https://alperenae.gitbook.io/ Software Homepage: https://textpattern.com/ Version : 4.6.2 Tested on: windows 10 / xammp Category: WebApp Google Dork: intext:"Published with...

CVE-2015-8033

In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account...

CVE-2015-8032

In Textpattern 4.5.7, an unprivileged author can change an article's markup setting...

Design/Logic Flaw

In Textpattern 4.5.7, an unprivileged author can change an article's markup setting...

Design/Logic Flaw

In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account...

CVE-2015-8033

In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account...

CVE-2015-8033

The CVE-2015-8033 entry concerns Textpattern 4.5.7, where the password-reset feature does not securely tether a password hash to a user account. The NVD data lists CVSS v3.1 base metrics: 5.3 (Medium) with Network attack vector, Low attack complexity, no privileges required, no user interaction, ...