CVE-2018-17044

In YzmCMS 5.1, stored XSS exists via the admin/systemmanage/userconfigadd.html title parameter...

Cross site scripting

In YzmCMS 5.1, stored XSS exists via the admin/systemmanage/userconfigadd.html title parameter...

Monstra CMS Cross-Site Scripting Vulnerability (CNVD-2019-03469)

Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. A cross-site scripting vulnerability exists in the admin/index.php file in Monstra CMS version 3.0.4, which c...

Monstra CMS Cross-Site Scripting Vulnerability (CNVD-2019-03473)

Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. A cross-site scripting vulnerability exists in the admin/index.php file in Monstra CMS version 3.0.4, which c...

Apache Syncope 2.0.7 - Remote Code Execution

Exploit Title: Apache Syncope 2.0.7 - Remote Code Execution Date: 2018-09-12 Exploit Author: Che-Chun Kuo Vendor Homepage: https://syncope.apache.org/ Software Link: http://archive.apache.org/dist/syncope/ Version: 2.0.7 Tested on: Windows Advisory: https://syncope.apache.org/security CVE:...

jiNa OCR Image To Text 1.0 Denial Of Service

Exploit Title: jiNa OCR Image to Text 1.0 - Denial of Service PoC Author: Gionathan "John" Reale Discovey Date: 2018-09-10 Software Link: http://www.convertimagetotext.net/downloadsoftware.php Tested Version: 1.0 Tested on OS: Windows 7 32-bit Steps to Reproduce: Run the python exploit script, it...

Easy File Sharing Web Server 6.9 Buffer Overflow Exploit

Easy File Sharing Web Server version 6.9 POST msg.ghp UserID remote buffer overflow SEH exploit with DEP bypass and ROP. !/usr/bin/python Exploit Title: Easy File Sharing Web Server 6.9 - 'POST' msg.ghp 'UserID' Remote Buffer Overflow SEHDEP Bypass + ROP Google Dork: intitle:"Login - powered by...

CVE-2018-16772

Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new...

CVE-2018-16772

Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new...

Hoosk Cross-Site Scripting Vulnerability

Hoosk is a lightweight user-centered content management system CMS. The system has built-in Codelgniter for creating responsive websites. A cross-site scripting vulnerability exists in Hoosk 1.7.0, which can be exploited by an attacker via the navigation title of a new page entered at...

Cross-site Scripting (XSS)

Kamsar.WebConsole is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of html encoding in the value of Title of RenderHead, allowing XSS attacks...

CVE-2018-16325

There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field...

CVE-2018-16325

GetSimple CMS 3.4.0.9 is affected by Stored/ reflected XSS via the admin/edit.php title field (CVE-2018-16325). The available connected documents confirm XSS in the title input, but do not provide exploitation details or a patch/mitigation entry. No explicit root-cause or vulnerable vector beyond...

RICOH MP C4504ex Printer - Cross-Site Request Forgery (Add Admin)

Exploit Title: RICOH MP C4504ex Printer - Cross-Site Request Forgery Add Admin Date: 2018-08-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link :...

CVE-2018-15567

CMSUno before 1.5.3 has XSS via the title field...

CVE-2018-15567

CMSUno before 1.5.3 has XSS via the title field...

CVE-2018-15567

CMSUno before 1.5.3 is vulnerable to a cross-site scripting (XSS) issue in the title field. The vulnerability is described as XSS via the title field, affecting versions prior to 1.5.3. Exploitation details, impacted components beyond the title field, and remediation steps are not provided in the...

CMSUno Cross-Site Scripting Vulnerability

CMSUno is a content management system for creating single page responsive websites. A cross-site scripting vulnerability exists in CMSUno versions prior to 1.5.3. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the title field...

PHP Scripts Mall Myperfectresume/JobHero/Resume Clone Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Myperfectresume/JobHero/Resume Clone Script is a set of online resume generating website scripts by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Myperfectresume/JobHero/Resume Clone Script version 2.0.6, which can be exploited by remote...

Switch Port Mapping Tool 2.81.2 Denial Of Service

Exploit Title: Switch Port Mapping Tool 2.81.2 - 'Name Field' Denial of Service PoC Discovery by: Shubham Singh Known As: Spirited Wolf Twitter: @Pwsecspirit Discovey Date: 2018-08-13 Vendor Homepage: https://switchportmapper.com/ Software Link: https://switchportmapper.com/download/spm2812.zip...