204 matches found
BearAdmin 代码问题漏洞
BearAdmin is yupoxiong individual developer's backend management system based on ThinkPHP6.0+AdminLTE3.2. BearAdmin suffers from a security vulnerability that originates from allowing an attacker to execute arbitrary remote code via the Upfile function in the extend/tools/Ueditor endpoint...
Z-BlogPHP 代码问题漏洞
Z-BlogPHP is an open source PHP-based blogging system for the Z-blog community. A security vulnerability exists in Z-BlogPHP 1.7.2 and earlier versions, which stems from a server-side request forgery SSRF vulnerability in the zbusers/plugin/UEditor/php/actioncrawler.php file that allows a remote...
CVE-2022-37299
An issue was discovered in Shirne CMS 1.2.0. There is a Path Traversal vulnerability which could cause arbitrary file read via /static/ueditor/php/controller.php...
ShirneCMS 路径遍历漏洞
ShirneCMS is an open source backend management system of Shirne Software Shirnecn. ShirneCMS version 1.2.0 has a path traversal vulnerability. Attackers use this vulnerability to read arbitrary files via /static/ueditor/php/controller.php...
CVE-2021-27693
Server-side Request Forgery SSRF vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage...
CVE-2021-42242
A command execution vulnerability exists in jfinalcms 5.0.1 via com.jflyfox.component.controller.Ueditor...
CVE-2021-42242
A command execution vulnerability exists in jfinalcms 5.0.1 via com.jflyfox.component.controller.Ueditor...
Command injection
A command execution vulnerability exists in jfinalcms 5.0.1 via com.jflyfox.component.controller.Ueditor...
Jfinal CMS 安全漏洞
Jfinal CMS is a powerful information consulting website developed in java, using the simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS version 5.0.1 has a command injection vulnerability, which originates from...
Ueditor cross-site scripting vulnerability (CNVD-2024-02966)
UEditor is a rich text web editor that is lightweight, customizable, and focused on user experience. A cross-site scripting vulnerability exists in Ueditor version 1.4.3.3. An attacker can exploit this vulnerability to obtain user cookie information...
CVE-2021-37271
Cross Site Scripting XSS vulnerability exists in UEditor v1.4.3.3, which can be exploited by an attacker to obtain user cookie information...
CVE-2021-37271
Cross Site Scripting XSS vulnerability exists in UEditor v1.4.3.3, which can be exploited by an attacker to obtain user cookie information...
Cross site scripting
Cross Site Scripting XSS vulnerability exists in UEditor v1.4.3.3, which can be exploited by an attacker to obtain user cookie information...
CVE-2021-37271
CVE-2021-37271 affects UEditor v1.4.3.3, with a Cross Site Scripting (XSS) vulnerability that can be exploited to obtain a user’s cookies. The connected documents confirm the product/version and the impact but do not provide detailed exploit steps, vectors, or remediation information. No public d...
CVE-2021-37271
Cross Site Scripting XSS vulnerability exists in UEditor v1.4.3.3, which can be exploited by an attacker to obtain user cookie information...
Ueditor 跨站脚本漏洞
UEditor is a rich text web editor that is lightweight, customizable, and focused on user experience. A cross-site scripting vulnerability exists in Ueditor version 1.4.3.3. An attacker can exploit this vulnerability to obtain user cookie information...
YzmCMS Cross-Site Scripting Vulnerability (CNVD-2021-39769)
Yzmcms is an open source CMS Content Management System. A cross-site scripting vulnerability exists in YzmCMS version 5.6. The vulnerability stems from the program using UEditor 1.4.3.3, so the vulnerability can be exploited through the SRC attribute of the IFRAME element in...
CVE-2020-23370
In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, which allows remote attackers to upload a swf file. The swf file can be injected with arbitrary web script or HTML...
CVE-2020-23370
In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, which allows remote attackers to upload a swf file. The swf file can be injected with arbitrary web script or HTML...