340 matches found
CVE-2022-30073
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS via /admin/users/save.php...
WBCE CMS 跨站脚本漏洞
WBCE CMS is an open source content management system CMS based on PHP and MySQL. version 1.5.2 of WBCE CMS contains a cross-site scripting vulnerability that can be exploited by attackers to conduct cross-site scripting XSS attacks via /admin/users/save.php...
WBCE CMS 跨站脚本漏洞
WBCE CMS is an open source content management system CMS based on PHP and MySQL. version 1.5.2 of WBCE CMS contains a cross-site scripting vulnerability that can be exploited to cause a cross-site scripting XSS attack via the \admin\pages\sectionssave.php namesection2 parameter...
WBCE CMS Cross-Site Scripting Vulnerability
WBCE CMS is a WBCB CMS forum that converts HTML to WBCB CMS templates.A cross-site scripting vulnerability exists in WBCE CMS version 1.5.2, which can be exploited by attackers to execute malicious code, tamper with pages to perform phishing attacks, and trick users into logging in again and then...
CVE-2022-28477
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS...
CVE-2022-28477
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS...
CVE-2022-28477
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS...
Cross site scripting
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS...
CVE-2022-28477
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS...
CVE-2022-28477
CVE-2022-28477 affects WBCE CMS 1.5.2 and is described as a Cross Site Scripting (XSS) vulnerability. The connected sources indicate that an attacker could execute malicious code, tamper with pages to perform phishing, and trick users into revealing credentials; however, explicit root-cause detai...
CVE-2022-25101
A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-25099
A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-25099
A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-25099
A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...
Security feature bypass
A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...
Design/Logic Flaw
A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...
WBCE CMS 安全漏洞
WBCE CMS is an open source content management system CMS based on PHP and MySQL. WBCE CMS suffers from a security vulnerability that originates in /templates/install.php that allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-25099
A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-25099
Summary: CVE-2022-25099 affects WBCE CMS v1.5.2, specifically the /languages/index.php component. The vulnerability allows an attacker to execute arbitrary code by supplying a crafted PHP file. The linked sources indicate the issue originates from that file path/entry, but do not provide explicit...
CVE-2022-25101
CVE-2022-25101 affects WBCE CMS v1.5.2, with the vulnerable entry in the component path /templates/install.php . A crafted PHP file can lead to arbitrary code execution . The provided documents identify the affected software and the vulnerable file, but do not include exploitation details, versio...