1063 matches found
YzmCMS Cross-Site Scripting Vulnerability (CNVD-2018-06397 )
YzmCMS is an open source CMS Content Management System developed by Chinese programmer Yuan Zhimeng. A cross-site scripting vulnerability exists in YzmCMS version 3.7. A remote attacker can exploit this vulnerability by sending the 'title' parameter to the advertisement/adver/edit.html page to...
CVE-2018-8070
QCMS version 3.0 has XSS via the title parameter to the /guest/index.html URI...
Design/Logic Flaw
QCMS version 3.0 has XSS via the title parameter to the /guest/index.html URI...
CVE-2018-8070
QCMS version 3.0 has XSS via the title parameter to the /guest/index.html URI...
CVE-2018-8070
CVE-2018-8070 describes an XSS vulnerability in QCMS 3.0 triggered by the title parameter to the /guest/index.html URI. The issue is due to improper handling of user-supplied input in that parameter, enabling cross-site scripting. Multiple connected sources (Red Hat, CNVD, and others) confirm the...
QCMS cross-site scripting vulnerability (CNVD-2018-06392)
QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in QCMS version 3.0. A remote attacker can exploit this vulnerability by sending the 'title' parameter to the /guest/index.html URI to obtain a user cookie...
CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2018-02622)
CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engines. A cross-site scripting vulnerability exists in CMS Made Simple CMSMS 2.2.5. The vulnerability can be exploited to conduct cross-site scripting attacks via the title parameter...
Code injection
CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...
CVE-2018-5963
CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...
CVE-2018-5963
CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...
CVE-2018-5963
CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...
CVE-2018-5662
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php countertitle parameter...
CVE-2018-5312
The tabs-responsive plugin 1.8.0 for WordPress has XSS via the posttitle parameter to wp-admin/post.php...
Fork CMS title parameter cross-site scripting vulnerability
Fork CMS is an open source content management system CMS developed using PHP. The system contains blogs , questions and answers , forms and other modules . A cross-site scripting vulnerability exists in Fork CMS version 5.0.7. The vulnerability can be exploited to inject arbitrary web script or...
Design/Logic Flaw
Fork CMS 5.0.7 has XSS in /private/en/pages/edit via the title parameter...
CVE-2018-5215
Fork CMS 5.0.7 has XSS in /private/en/pages/edit via the title parameter...
CVE-2018-5215
Fork CMS 5.0.7 has XSS in /private/en/pages/edit via the title parameter...
Muslim Matrimonial Script Cross-Site Scripting Vulnerability (CNVD-2018-01239)
Muslim Matrimonial Script is a community matrimonial script for matrimonial websites by PHP Scripts Mall. A cross-site scripting vulnerability exists in PHP Scripts Mall Muslim Matrimonial Script. The vulnerability can be exploited to conduct cross-site scripting attacks via the admin/eventadd.ph...