EUVD-2024-49449

Malicious code in bioql PyPI...

EUVD-2024-48741

Malicious code in bioql PyPI...

CVE-2024-8876

A vulnerability, which was classified as problematic, has been found in xiaohe4966 TpMeCMS up to 1.3.3.1. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The...

CVE-2024-44684

TpMeCMS 1.3.3.2 is vulnerable to Cross Site Scripting XSS in /h.php/page?ref=addtabs via the "Title," "Images," and "Content" fields...

CVE-2024-7900

A vulnerability, which was classified as problematic, was found in xiaohe4966 TpMeCMS 1.3.3.2. Affected is an unknown function of the file /h.php/general/config?ref=addtabs of the component Basic Configuration Handler. The manipulation of the argument Site Name/Beian/Contact...

CVE-2024-8876

A vulnerability, which was classified as problematic, has been found in xiaohe4966 TpMeCMS up to 1.3.3.1. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The...

CVE-2024-8876

A vulnerability, which was classified as problematic, has been found in xiaohe4966 TpMeCMS up to 1.3.3.1. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The...

CVE-2024-8876 xiaohe4966 TpMeCMS lang path traversal

A vulnerability, which was classified as problematic, has been found in xiaohe4966 TpMeCMS up to 1.3.3.1. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The...

CVE-2024-8876

TpMeCMS (xiaohe4966) vulnerable up to version 1.3.3.1 due to path traversal in the /index/ajax/lang handler when the lang parameter is manipulated. The issue can be exploited remotely and has been publicly disclosed. The recommended fix is upgrading to TpMeCMS 1.3.3.2; as a temporary measure, res...

CVE-2024-8876: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability, which was classified as problematic, has been found in xiaohe4966 TpMeCMS up to 1.3.3.1. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The...

TpMeCMS path traversal vulnerability

TpMeCMS is a CMS based on the FastAdmin framework developed by Xiaohe, an individual developer. A path traversal vulnerability exists in TpMeCMS 1.3.3.1 and earlier versions, which stems from the parameter lang in the file /index/ajax/lang that causes path traversal...

CVE-2024-44684

TpMeCMS 1.3.3.2 is vulnerable to Cross Site Scripting XSS in /h.php/page?ref=addtabs via the "Title," "Images," and "Content" fields...

CVE-2024-44684

TpMeCMS 1.3.3.2 is vulnerable to Cross Site Scripting XSS in /h.php/page?ref=addtabs via the "Title," "Images," and "Content" fields...

CVE-2024-44684

TpMeCMS 1.3.3.2 is vulnerable to Cross Site Scripting XSS in /h.php/page?ref=addtabs via the "Title," "Images," and "Content" fields...

CVE-2024-44684: Improper Neutralization of Input During Web Page Generation

TpMeCMS 1.3.3.2 is vulnerable to Cross Site Scripting XSS in /h.php/page?ref=addtabs via the "Title," "Images," and "Content" fields...

CVE-2024-44684

TpMeCMS 1.3.3.2 is vulnerable to Cross Site Scripting XSS in /h.php/page?ref=addtabs via the "Title," "Images," and "Content" fields...

PT-2024-31211 · Tpmecms · Tpmecms

Name of the Vulnerable Software and Affected Versions: TpMeCMS version 1.3.3.2 Description: The issue is related to Cross Site Scripting XSS in the /h.php/page?ref=addtabs endpoint, specifically via the Title, Images, and Content fields. This allows for potential malicious script injection...

CVE-2024-44684

TpMeCMS 1.3.3.2 is vulnerable to Cross Site Scripting (XSS) in /h.php/page?ref=addtabs via the Title, Images, and Content fields. Documents specify the vulnerable endpoint and parameters but do not provide a fixed patched version. Recommended interim measure from PT-2024-31211 is to restrict acce...

TpMeCMS security vulnerabilities

TpMeCMS is a CMS based on FastAdmin framework developed by Xiaohe personal developer. A security vulnerability exists in TpMeCMS version 1.3.3.2, which originates from a cross-site scripting vulnerability in the Title, Images and Content parameters of the /h.php/page?ref=addtabs file...

TpMeCMS Cross-Site Scripting Vulnerability

TpMeCMS is a CMS developed on the FastAdmin framework. TpMeCMS version 1.3.3.2 suffers from a cross-site scripting vulnerability, which originates from the lack of effective filtering and escaping of user-supplied data in the parameter Site Name/Beian/Contact address/copyright/technical support i...