Lucene search
K

340 matches found

Cvelist
Cvelist
added 2022/05/17 4:2 p.m.13 views

CVE-2022-30073

WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS via /admin/users/save.php...

5.5AI score0.17607EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/17 12:0 a.m.4 views

WBCE CMS 跨站脚本漏洞

WBCE CMS is an open source content management system CMS based on PHP and MySQL. version 1.5.2 of WBCE CMS contains a cross-site scripting vulnerability that can be exploited by attackers to conduct cross-site scripting XSS attacks via /admin/users/save.php...

5.4CVSS5.2AI score0.17607EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/05/17 12:0 a.m.3 views

WBCE CMS 跨站脚本漏洞

WBCE CMS is an open source content management system CMS based on PHP and MySQL. version 1.5.2 of WBCE CMS contains a cross-site scripting vulnerability that can be exploited to cause a cross-site scripting XSS attack via the \admin\pages\sectionssave.php namesection2 parameter...

5.4CVSS5.3AI score0.00258EPSS
Exploits1References4
CNVD
CNVD
added 2022/04/29 12:0 a.m.19 views

WBCE CMS Cross-Site Scripting Vulnerability

WBCE CMS is a WBCB CMS forum that converts HTML to WBCB CMS templates.A cross-site scripting vulnerability exists in WBCE CMS version 1.5.2, which can be exploited by attackers to execute malicious code, tamper with pages to perform phishing attacks, and trick users into logging in again and then...

4.3CVSS5.9AI score0.00293EPSS
Exploits1Affected Software1
OSV
OSV
added 2022/04/28 8:15 p.m.19 views

CVE-2022-28477

WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS...

6.1CVSS6.4AI score0.00293EPSS
Exploits1References2
NVD
NVD
added 2022/04/28 8:15 p.m.17 views

CVE-2022-28477

WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS...

6.1CVSS0.00293EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/04/28 8:15 p.m.1 views

CVE-2022-28477

WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS...

6.1CVSS5.9AI score0.00293EPSS
Exploits1References3
Prion
Prion
added 2022/04/28 8:15 p.m.15 views

Cross site scripting

WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS...

4.3CVSS6.1AI score0.00293EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/04/28 7:41 p.m.23 views

CVE-2022-28477

WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS...

6.3AI score0.00293EPSS
Exploits1References2
CVE
CVE
added 2022/04/28 7:41 p.m.77 views

CVE-2022-28477

CVE-2022-28477 affects WBCE CMS 1.5.2 and is described as a Cross Site Scripting (XSS) vulnerability. The connected sources indicate that an attacker could execute malicious code, tamper with pages to perform phishing, and trick users into revealing credentials; however, explicit root-cause detai...

6.1CVSS6.1AI score0.00293EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2022/02/24 3:15 p.m.9 views

CVE-2022-25101

A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...

7.8CVSS0.00492EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/02/24 3:15 p.m.4 views

CVE-2022-25099

A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...

7.8CVSS7.4AI score0.00492EPSS
Exploits1References2
OSV
OSV
added 2022/02/24 3:15 p.m.11 views

CVE-2022-25099

A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...

7.8CVSS7.7AI score
Exploits0References1
NVD
NVD
added 2022/02/24 3:15 p.m.8 views

CVE-2022-25099

A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...

7.8CVSS0.00492EPSS
Exploits1References1
Prion
Prion
added 2022/02/24 3:15 p.m.13 views

Security feature bypass

A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...

6.8CVSS7.8AI score0.00492EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2022/02/24 3:15 p.m.11 views

Design/Logic Flaw

A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...

6.8CVSS7.8AI score0.00492EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/02/24 12:0 a.m.2 views

WBCE CMS 安全漏洞

WBCE CMS is an open source content management system CMS based on PHP and MySQL. WBCE CMS suffers from a security vulnerability that originates in /templates/install.php that allows attackers to execute arbitrary code via a crafted PHP file...

7.8CVSS8AI score0.00492EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/02/23 9:11 p.m.13 views

CVE-2022-25099

A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...

8AI score0.00492EPSS
Exploits1References1
CVE
CVE
added 2022/02/23 9:11 p.m.132 views

CVE-2022-25099

Summary: CVE-2022-25099 affects WBCE CMS v1.5.2, specifically the /languages/index.php component. The vulnerability allows an attacker to execute arbitrary code by supplying a crafted PHP file. The linked sources indicate the issue originates from that file path/entry, but do not provide explicit...

7.8CVSS7.8AI score0.00492EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2022/02/23 9:11 p.m.87 views

CVE-2022-25101

CVE-2022-25101 affects WBCE CMS v1.5.2, with the vulnerable entry in the component path /templates/install.php . A crafted PHP file can lead to arbitrary code execution . The provided documents identify the affected software and the vulnerable file, but do not include exploitation details, versio...

7.8CVSS7.8AI score0.00492EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder