PT-2018-9852 · Wuzhi · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: An issue was discovered in the content-management feature, which has Stored XSS via the title or content section. Recommendations: For WUZHI CMS version 4.1.0, update to a newer version that contains a fix...

CVE-2018-10321

Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings...

CVE-2018-10321

Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings...

CVE-2018-10321

Summary: Frog CMS 0.9.5 has a stored Cross-Site Scripting vulnerability via the Settings page’s Admin Site title. An admin can inject payloads that are stored and later executed in other contexts, per multiple sources. Public exploits exist (e.g., Exploit-DB and PacketStorm entries) describing th...

CVE-2018-10321

Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings...

CVE-2018-10321: Improper Neutralization of Input During Web Page Generation

Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings...

Ericsson-LG iPECS NMS A.1Ac - Cleartext Credential Disclosure

Ericsson-LG iPECS NMS A.1Ac - Cleartext Credential Disclosure -- coding: utf-8 -- Exploit Title: Ericsson-LG iPECS NMS - Cleartext Cred. Dump Vendor Notification: 03-03-2018 - No response Initial CVE: 04-04-2018 Disclosure: 21-04-2018 Exploit Author: Berk Cem Göksel Contact: twitter.com/berkcgoks...

Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-08587)

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. The vulnerability can be exploite...

PT-2018-9827

Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue is related to a stored Cross Site Scripting vulnerability. It can be triggered via the Admin Site title in the Settings section. Recommendations: For Frog CMS version 0.9.5, update to a newer...

MiniCMS Cross-Site Scripting Vulnerability (CNVD-2018-08588)

MiniCMS is a mini content management system CMS designed for personal websites. A cross-site scripting vulnerability exists in MiniCMS version 1.10. A remote attacker can exploit this vulnerability to obtain a user cookie with the 'title' parameter...

PRTG Network Monitor < 18.1.39.1648 - Stack Overflow Denial of Service Exploit

Exploit for windows platform in category dos / poc Exploit Title: PRTG 18.1.39.1648 - Stack Overflow Exploit Author: Lucas "luriel" Carmo Vendor Homepage: https://www.paessler.com/prtg Software Link: https://www.paessler.com/download/prtg-download Version: 18.1.39.1648 CVE : CVE-2018-10253 Post...

CVE-2018-10296

MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter...

CVE-2018-10296

Technical details for CVE-2018-10296 are not publicly available in the provided documents. No concrete affected versions, root cause, or remediation are shown here. Monitor for updates in connected sources.

CVE-2018-10296

MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter...

CVE-2018-10296

MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter...

CVE-2017-17902: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Kliqqi CMS 3.5.2 via the randkey parameter of a new story at the pligg/story.php?title= URI...

PT-2018-9806

Name of the Vulnerable Software and Affected Versions: MiniCMS version 1.10 Description: The issue allows for XSS via the title parameter in the "mc-admin/post-edit.php" API endpoint. Recommendations: For MiniCMS version 1.10, avoid using the title parameter in the "mc-admin/post-edit.php" endpoi...

CVE-2018-10296: Improper Neutralization of Input During Web Page Generation

MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter...

PT-2018-6591

Name of the Vulnerable Software and Affected Versions: Kliqqi CMS version 3.5.2 Description: A SQL Injection issue exists in the software, allowing exploitation via the randkey parameter of a new story at the "pligg/story.php?title=" URI. Recommendations: For Kliqqi CMS version 3.5.2, avoid using...

PT-2018-19119

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.0.1.1049 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...