34 matches found
EUVD-2020-15577
Malware in sbrugna...
CVE-2020-22818
MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...
CVE-2020-22820
MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...
Security Bulletin: IBM Sterling Control Center v6.2.x and v6.3.x are vulnerable due to IBM SDK Java Technology Edition vulnerability
Summary IBM SDK, Java Technology Edition Quarterly CPU - Oct 2023 - Includes Oracle October 2023 CPU plus CVE-2023-5676, CVE-2023-22081, CVE-2023-22067 affecting Sterling Control Center v6.2.x and v6.3.x. Vulnerability Details CVEID:CVE-2023-22081 DESCRIPTION: An unspecified vulnerability in Java...
Cross site scripting
DedeCMS v6.2 was discovered to contain a Cross-site Scripting XSS vulnerability via specadd.php...
CVE-2023-48068
DedeCMS v6.2 was discovered to contain a Cross-site Scripting XSS vulnerability via specadd.php...
CVE-2023-48068
DedeCMS v6.2 is affected by a Cross-site Scripting (XSS) issue in the file spec_add.php. The vulnerability is confirmed in multiple sources and is described as an XSS via spec_add.php. CVSS v3.1 base score 5.4 (MEDIUM) with Network attack vector, Low attack complexity, Privileges Required: Low, U...
CVE-2023-48068
DedeCMS v6.2 was discovered to contain a Cross-site Scripting XSS vulnerability via specadd.php...
CVE-2020-22820
MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...
CVE-2020-22818
MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...
Sql injection
MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter...
Sql injection
MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...
Sql injection
MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...
CVE-2020-22818
MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...
CVE-2020-22819
MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter...
CVE-2020-22819
CVE-2020-22819 affects MKCMS V6.2, with a SQL injection in the /ucenter/active.php endpoint via the verify parameter. Public documents consistently describe an SQLi vulnerability in MKCMS 6.2 hosted parameter, leading to high-impact confidentiality/integrity/availability (CVSS 3.1 base 9.8). Root...
CVE-2020-22820
MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...
CVE-2020-22820
MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...
CVE-2020-22819
MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter...
CVE-2020-22818
MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...