Lucene search
+L

77 matches found

Prion
Prion
added 2022/08/03 1:15 a.m.29 views

Cross site request forgery (csrf)

Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Request Forgery CSRF via the component savepage.php. This vulnerability allows attackers to execute arbitrary code...

6.8CVSS9AI score0.00766EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/08/03 12:50 a.m.86 views

CVE-2022-34937

CVE-2022-34937 affects Yuba u5cms v8.3.5 and is due to a Cross-Site Request Forgery vulnerability in the savepage.php component. This CSRF flaw is described as allowing attackers to execute arbitrary code. The NVD entry lists a high impact (C, I, A) with network attack vector and user interaction...

8.8CVSS9AI score0.00766EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/08/03 12:50 a.m.43 views

CVE-2022-34937

Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Request Forgery CSRF via the component savepage.php. This vulnerability allows attackers to execute arbitrary code...

9.2AI score0.00766EPSS
SaveExploits1References1
OSV
OSV
added 2022/08/03 12:50 a.m.12 views

CVE-2022-34937

Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Request Forgery CSRF via the component savepage.php. This vulnerability allows attackers to execute arbitrary code...

8AI score
SaveExploits0References3
CNNVD
CNNVD
added 2022/08/03 12:00 a.m.12 views

u5cms 跨站请求伪造漏洞

u5cms is u5cms open source a medium-sized web content management system . u5cms v8.3.5 version of the existence of cross-site request forgery vulnerability , the vulnerability stems from an attacker can savepage.php component through the vulnerability of the execution of arbitrary code...

8.8CVSS8.2AI score0.00766EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/06/17 4:15 p.m.9 views

CVE-2022-32442

u5cms version 8.3.5 is vulnerable to Cross Site Scripting XSS. When a user accesses the default home page if the parameter passed in is http://127.0.0.1/? "Onmouseover=%27tzgl 96502%27bad=", it can cause html injection...

6.1CVSS6.4AI score0.00759EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/06/17 4:15 p.m.5 views

CVE-2022-32444

An issue was discovered in u5cms verion 8.3.5 There is a URL redirection vulnerability that can cause a user's browser to be redirected to another site via /loginsave.php...

6.1CVSS6.2AI score0.02396EPSS
SaveExploits1References3
NVD
NVD
added 2022/06/17 4:15 p.m.30 views

CVE-2022-32442

u5cms version 8.3.5 is vulnerable to Cross Site Scripting XSS. When a user accesses the default home page if the parameter passed in is http://127.0.0.1/? "Onmouseover=%27tzgl 96502%27bad=", it can cause html injection...

6.1CVSS0.00759EPSS
SaveExploits1References1
NVD
NVD
added 2022/06/17 4:15 p.m.33 views

CVE-2022-32444

An issue was discovered in u5cms verion 8.3.5 There is a URL redirection vulnerability that can cause a user's browser to be redirected to another site via /loginsave.php...

6.1CVSS0.02396EPSS
SaveExploits1References1
Prion
Prion
added 2022/06/17 4:15 p.m.25 views

Design/Logic Flaw

An issue was discovered in u5cms verion 8.3.5 There is a URL redirection vulnerability that can cause a user's browser to be redirected to another site via /loginsave.php...

5.8CVSS6AI score0.02396EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2022/06/17 4:15 p.m.24 views

Cross site scripting

u5cms version 8.3.5 is vulnerable to Cross Site Scripting XSS. When a user accesses the default home page if the parameter passed in is http://127.0.0.1/? "Onmouseover=%27tzgl 96502%27bad=", it can cause html injection...

4.3CVSS6.3AI score0.00759EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2022/06/17 3:22 p.m.8 views

CVE-2022-32442

u5cms version 8.3.5 is vulnerable to Cross Site Scripting XSS. When a user accesses the default home page if the parameter passed in is http://127.0.0.1/? "Onmouseover=%27tzgl 96502%27bad=", it can cause html injection...

6.3AI score
SaveExploits0References3
Cvelist
Cvelist
added 2022/06/17 3:22 p.m.38 views

CVE-2022-32442

u5cms version 8.3.5 is vulnerable to Cross Site Scripting XSS. When a user accesses the default home page if the parameter passed in is http://127.0.0.1/? "Onmouseover=%27tzgl 96502%27bad=", it can cause html injection...

6.5AI score0.00759EPSS
SaveExploits1References1
CVE
CVE
added 2022/06/17 3:22 p.m.71 views

CVE-2022-32442

CVE-2022-32442 affects u5cms 8.3.5. The issue is a stored/reflected XSS on the default home page caused by insufficient input validation of a URL parameter (example: Onmouseover=%27tzgl (96502)%27bad=). Documents confirm HTML injection risk; no explicit exploit details or remediation are provided...

6.1CVSS6.3AI score0.00759EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2022/06/17 3:15 p.m.10 views

CVE-2022-32444

An issue was discovered in u5cms verion 8.3.5 There is a URL redirection vulnerability that can cause a user's browser to be redirected to another site via /loginsave.php...

6.5AI score
SaveExploits0References3
CVE
CVE
added 2022/06/17 3:15 p.m.90 views

CVE-2022-32444

CVE-2022-32444 affects u5cms version 8.3.5 and is a URL redirection/open redirect vulnerability. The vulnerability occurs via /loginsave.php, allowing an attacker to redirect a user’s browser to a malicious site. The connected Nuclei template confirms the affected software/component and describes...

6.1CVSS6.1AI score0.02396EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/06/17 3:15 p.m.39 views

CVE-2022-32444

An issue was discovered in u5cms verion 8.3.5 There is a URL redirection vulnerability that can cause a user's browser to be redirected to another site via /loginsave.php...

6.3AI score0.02396EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/06/17 12:00 a.m.12 views

u5cms 输入验证错误漏洞

u5cms is u5cms open source a medium-sized web content management system . u5cms 8.3.5 version of a security vulnerability , the vulnerability stems from /loginsave.php in the existence of URL redirection vulnerability , an attacker can make use of this vulnerability can make the user jump to a...

6.1CVSS6.3AI score0.02396EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/17 12:00 a.m.12 views

u5cms 跨站脚本漏洞

u5cms is u5cms open source a medium-sized web content management system . u5cms 8.3.5 version of a security vulnerability , the vulnerability stems from the default home page does not check the user input parameters are legitimate , an attacker can use this vulnerability to malicious script...

6.1CVSS6.4AI score0.00759EPSS
SaveExploits1References2
CNVD
CNVD
added 2015/02/13 12:00 a.m.16 views

u5CMS Open Redirect Vulnerability

u5CMS is a content management system CMS based on PHP, MySQL and Apache for medium-sized websites, conferences, audit processes, PayPal payments and online surveys. The system supports WYSIWYG editor, creating survey forms and data storage. An open redirect vulnerability exists in u5CMS. A remote...

5.8CVSS6.8AI score0.07207EPSS
SaveExploits3References1
Rows per page
Query Builder