Lucene search
+L

82 matches found

osv_cve
osv_cve
•added 2020/05/07 8:15 p.m.•18 views

CVE-2020-12704

UliCMS before 2020.2 has PageController stored XSS...

6.1CVSS5.8AI score0.01186EPSS
SaveExploits1References1
NVD
NVD
•added 2020/05/07 8:15 p.m.•28 views

CVE-2020-12704

UliCMS before 2020.2 has PageController stored XSS...

6.1CVSS6.3AI score0.01186EPSS
SaveExploits1References1
Prion
Prion
•added 2020/05/07 8:15 p.m.•19 views

Design/Logic Flaw

UliCMS before 2020.2 has XSS during PackageController uninstall...

4.3CVSS6AI score0.00641EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2020/05/07 8:15 p.m.•31 views

Cross site scripting

UliCMS before 2020.2 has PageController stored XSS...

4.3CVSS6.2AI score0.01186EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2020/05/07 7:10 p.m.•6 views

CVE-2020-12703

UliCMS before 2020.2 has XSS during PackageController uninstall...

6.1CVSS0.00641EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/05/07 7:10 p.m.•29 views

CVE-2020-12703

UliCMS before 2020.2 has XSS during PackageController uninstall...

6.1AI score0.00641EPSS
SaveExploits0References1
CVE
CVE
•added 2020/05/07 7:10 p.m.•83 views

CVE-2020-12703

CVE-2020-12703 affects UliCMS prior to 2020.2, with a Cross-Site Scripting (XSS) vulnerability occurring during PackageController uninstall. Root cause cited across sources is lack of proper validation of client-side data within the web application. Impact is client-side code execution within aff...

6.1CVSS6AI score0.00641EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/05/07 7:09 p.m.•36 views

CVE-2020-12704

UliCMS before 2020.2 has PageController stored XSS...

6.3AI score0.01186EPSS
SaveExploits1References1
Mend
Mend
•added 2020/05/07 7:09 p.m.•10 views

CVE-2020-12704

UliCMS before 2020.2 has PageController stored XSS...

6.1CVSS0.01186EPSS
SaveExploits1References1
CVE
CVE
•added 2020/05/07 7:09 p.m.•109 views

CVE-2020-12704

UliCMS before version 2020.2 contains a stored XSS in the PageController (client-side data validation issue). Multiple sources (NVD, Red Hat, CNVD, CVE listings) confirm a cross-site scripting vulnerability exists in UliCMS prior to 2020.2, enabling an attacker to inject script via the affected p...

6.1CVSS6.2AI score0.01186EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2020/05/07 12:00 a.m.•7 views

PT-2020-13216

Name of the Vulnerable Software and Affected Versions UliCMS versions prior to 2020.2 Description The issue is related to stored XSS in the PageController. Recommendations For versions prior to 2020.2, update to version 2020.2 or later to resolve the issue...

6.1CVSS0.01186EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/07 12:00 a.m.•11 views

CVE-2020-12704: Improper Neutralization of Input During Web Page Generation

UliCMS before 2020.2 has PageController stored XSS...

6.1CVSS6.3AI score0.01186EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/05/07 12:00 a.m.•5 views

PT-2020-13215

Name of the Vulnerable Software and Affected Versions UliCMS versions prior to 2020.2 Description The issue is related to a Cross-Site Scripting XSS problem that occurs during the uninstall process of the PackageController. This allows for potential malicious script execution. Recommendations For...

6.1CVSS0.00641EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/07 12:00 a.m.•7 views

CVE-2020-12703: Improper Neutralization of Input During Web Page Generation

UliCMS before 2020.2 has XSS during PackageController uninstall...

6.1CVSS6.3AI score0.00641EPSS
SaveExploits0References2
CNVD
CNVD
•added 2020/03/25 12:00 a.m.•11 views

UliCMS Cross-Site Scripting Vulnerability

UliCMS is an open source content management system. UliCMS suffers from a cross-site scripting vulnerability that stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side code...

6.4AI score
SaveExploits0References1
zdt
zdt
•added 2020/03/24 12:00 a.m.•138 views

UliCMS 2020.1 - Persistent Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: UliCMS 2020.1 - Persistent Cross-Site Scripting Exploit Author: SunCSR Vendor Homepage: https://en.ulicms.de Software Link: https://en.ulicms.de/currentversions.html Version: 2020.1 Tested on: Windows CVE : N/A Vulnerabilit...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2020/03/24 12:00 a.m.•176 views

UliCMS 2020.1 Cross Site Scripting

Exploit Title: UliCMS 2020.1 - Persistent Cross-Site Scripting Google Dork: N/A Date: 2019-03-24 Exploit Author: SunCSR Vendor Homepage: https://en.ulicms.de Software Link: https://en.ulicms.de/currentversions.html Version: 2020.1 Tested on: Windows CVE : N/A Vulnerability : Stored Cross-Site...

7.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2020/03/24 12:00 a.m.•118 views

UliCMS 2020.1 - Persistent Cross-Site Scripting

UliCMS 2020.1 - Persistent Cross-Site Scripting Exploit Title: UliCMS 2020.1 - Persistent Cross-Site Scripting Google Dork: N/A Date: 2019-03-24 Exploit Author: SunCSR Vendor Homepage: https://en.ulicms.de Software Link: https://en.ulicms.de/currentversions.html Version: 2020.1 Tested on: Windows...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2020/03/24 12:00 a.m.•250 views

UliCMS 2020.1 - Persistent Cross-Site Scripting

Exploit Title: UliCMS 2020.1 - Persistent Cross-Site Scripting Google Dork: N/A Date: 2019-03-24 Exploit Author: SunCSR Vendor Homepage: https://en.ulicms.de Software Link: https://en.ulicms.de/currentversions.html Version: 2020.1 Tested on: Windows CVE : CVE-2020-12704 Vulnerability : Stored...

6.1CVSS6.2AI score0.01186EPSS
SaveExploits1
zdt
zdt
•added 2019/06/10 12:00 a.m.•217 views

UliCMS 2019.1 Spitting Lama - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: UliCMS 2019.1 "Spitting Lama" - Stored Cross-Site Scripting Google Dork: intext:"by UliCMS" Exploit Author: Unk9vvN Vendor Homepage: https://en.ulicms.de Software Link:...

4.3CVSS6.3AI score0.03473EPSS
SaveExploits9
Rows per page
Query Builder