Lucene search
+L

48 matches found

CNNVD
CNNVD
added 2022/09/16 12:00 a.m.14 views

Pixel&tonic Craft CMS 跨站脚本漏洞

Pixel & tonic Craft CMS is a content management system CMS from the US company Pixel & tonic. A cross-site scripting vulnerability exists in Craft CMS version 4.2.0.1, which stems from a security issue on the /admin/myaccount page...

5.4CVSS5.4AI score0.0057EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/09/16 12:00 a.m.15 views

Pixel&tonic Craft CMS 跨站脚本漏洞

Pixel & tonic Craft CMS is a content management system CMS from Pixel & tonic, USA. A security vulnerability exists in Craft CMS version 4.2.0.1, which stems from a security issue on the /admin/dashboard page...

5.4CVSS5.7AI score0.00441EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/04/03 12:00 a.m.10 views

Pixel&tonic Craft CMS 跨站脚本漏洞

Pixel & tonic Craft CMS is a content management system CMS from Pixel & Tonic Pixel & tonic USA. A security vulnerability exists in Craft CMS versions prior to 3.7.29 that allows an attacker to execute cross-site scripting...

6.1CVSS5.8AI score0.00628EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/01/25 12:00 a.m.17 views

Pixel&tonic Craft CMS 路径遍历漏洞

Pixel & tonic Craft CMS is a content management system CMS from Pixel & Tonic Pixel & tonic. A path traversal vulnerability exists in Pixel & tonic Craft CMS, which stems from a path traversal security issue in the Ethercreative Logs plugin for Craft CMS...

4.9CVSS5.3AI score0.13759EPSS
SaveExploits6References8
ATTACKERKB
ATTACKERKB
added 2021/11/08 3:15 p.m.5 views

CVE-2021-28022

Blind SQL injection in the login form in ServiceTonic Helpdesk software 9.0.35937 allows attacker to exfiltrate information via specially crafted HQL-compatible time-based SQL queries...

7.5CVSS7.6AI score0.01152EPSS
SaveExploits1References3
CNVD
CNVD
added 2020/06/08 12:00 a.m.13 views

Pixel & Tonic Craft CMS Comments plugin cross-site scripting vulnerability (CNVD-2020-34722)

Pixel & Tonic Craft CMS is the U.S. Pixel & Tonic company's set of content management system CMS. Comments plugin is one of the code comment generation plugin. A cross-site scripting vulnerability exists in the Pixel & Tonic Craft CMS Comments plugin. The vulnerability stems from a lack of proper...

5.4CVSS6.6AI score0.0054EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/06/08 12:00 a.m.10 views

Pixel & Tonic Craft CMS Comments plugin cross-site request forgery vulnerability

Pixel & Tonic Craft CMS is the U.S. Pixel & Tonic company's set of content management system CMS. Comments plugin is one of the code comment generation plugin. A cross-site request forgery vulnerability exists in the Pixel & Tonic Craft CMS Comments plugin. An attacker can exploit this...

6.5CVSS7AI score0.00428EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/05/26 12:00 a.m.97 views

Image Resizer Cross-Site Request Forgery Vulnerability

Pixel & Tonic Craft CMS is a content management system CMS of Pixel & Tonic, Inc. Image Resizer is one of the image editing plug-ins. A cross-site request forgery vulnerability exists in Image Resizer versions prior to 2.0.9 for Pixel & Tonic Craft CMS. A remote attacker could exploit this...

8.8CVSS6.9AI score0.00484EPSS
SaveExploits0References1
Rows per page
Query Builder