13 matches found
CVE-2018-15842
WolfCMS 0.8.3.1 has XSS via the /?/admin/page/add slug parameter...
Wolf CMS Cross-Site Scripting Vulnerability (CNVD-2018-15770)
Wolf CMS is a PHP-based open source content management system CMS developed by the Wolf CMS team. The system provides user interface , templates , user management and rights management and other functions . A cross-site scripting vulnerability exists in the Snippets tag in Wolf CMS version 0.8.3....
Wolf CMS Cross-Site Request Forgery Vulnerability
Wolf CMS is a PHP-based open source content management system CMS developed by the Wolf CMS team. The system provides user interface , templates , user management and rights management and other functions . A cross-site request forgery vulnerability exists in Wolf CMS version 0.8.3.1. A remote...
WolfCMS Open Redirect Vulnerability
WolfCMS is a PHP-based open source content management system CMS developed by the Wolf CMS team. The system provides user interface , templates , user management and rights management and other functions . An open redirection vulnerability exists in the login feature in WolfCMS version 0.8.3.1. A...
CVE-2018-8813
Open redirect vulnerability in the loginredirect parameter login functionality in WolfCMS 0.8.3.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a malformed URL...
WolfCMS Cross-Site Scripting Vulnerability (CNVD-2018-07056)
Wolf CMS is a lightweight content management system written in PHP. A stored cross-site scripting vulnerability exists in WolfCMS 0.8.3.1 in the Layout Name under the Layout tab. A low-privileged user can exploit this vulnerability to steal cookies from administrative users and compromise the...
Cross site scripting
WolfCMS version version 0.8.3.1 contains a Reflected Cross Site Scripting vulnerability in "Create New File" and "Create New Directory" input box from 'files' Tab that can result in Session Hijacking, Spread Worms,Control the browser remotely. . This attack appear to be exploitable via Attacker c...
Wolf CMS Cross-Site Scripting Vulnerability (CNVD-2018-05819)
Wolf CMS is a PHP-based open source content management system CMS developed by the Wolf CMS team. The system provides user interface , templates , user management and rights management and other functions . A cross-site scripting vulnerability exists in Wolf CMS version 0.8.3.1. A remote attacker...
Wolf CMS Cross-Site Scripting Vulnerability (CNVD-2017-32959)
Wolf CMS is a PHP-based open source content management system CMS developed by the Wolf CMS team. The system provides user interface , templates , user management and rights management and other functions . A cross-site scripting vulnerability exists in Wolf CMS version 0.8.3.1, which stems from...
Arbitrary File Write Vulnerability in Wolf CMS 0.8.3.1 Backend
Wolf CMS is a lightweight CMS program written in PHP. The latest version of Wolf CMS, version 0.8.3.1, has an arbitrary file write vulnerability in the backend, which can be exploited to create files with arbitrary suffixes and write arbitrary content. An attacker can use this vulnerability to...
Wolf CMS Cross-Site Scripting Vulnerability (CNVD-2016-05085)
Wolf CMS is a PHP-based open source content management system CMS developed by the Wolf CMS team. A cross-site scripting vulnerability exists in Wolf CMS version 0.8.3.1, which can be exploited by attackers to execute arbitrary script code, steal cookie-based authentication and launch other attac...
Wolf CMS - Arbitrary File Upload Execution
Wolf CMS - Arbitrary File Upload Execution Exploit Title : Wolf CMS 0.8.2 Arbitrary File Upload To Command Execution Reported Date : 05-May-2015 Fixed Date : 10-August-2015 Exploit Author : Narendra Bhati CVE ID : CVE-2015-6567 , CVE-2015-6568 Contact: Facebook :...
Wolf CMS Arbitrary File Upload To Command Execution Exploit
Exploit for php platform in category web applications Exploit Title : Wolf CMS 0.8.2 Arbitrary File Upload To Command Execution Reported Date : 05-May-2015 Fixed Date : 10-August-2015 Exploit Author : Narendra Bhati CVE ID : CVE-2015-6567 , CVE-2015-6568 Contact: Facebook :...