60 matches found
Malicious code in sprout-wcm-service (npm)
The package sprout-wcm-service was found to contain malicious code...
MAL-2025-33809 Malicious code in sprout-wcm-service (npm)
The package sprout-wcm-service was found to contain malicious code...
GHSA-QCGC-6Q86-7X2P AEM WCM Core Components CVG Image vulnerable to Reflected Cross-site Scripting
Core Components version 2.20.6 and earlier suffer from a reflected cross-site scripting XSS vulnerability in AdaptiveImageServlet via SVG images. An attacker with author access can upload a special crafted SVG image including a malicious Javascript and obtain a link that, when loaded by another...
Malicious code in usaa-wcm-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff24011199eca8ad2a782d264c3a05ef67298fafd3731135d21f3b8489b24ebc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6857 Malicious code in usaa-wcm-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff24011199eca8ad2a782d264c3a05ef67298fafd3731135d21f3b8489b24ebc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2017-1536
IBM Support Tools for Lotus WCM IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a truste...
Cross site scripting
IBM Support Tools for Lotus WCM IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a truste...
CVE-2017-1536
CVE-2017-1536 : IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0) is vulnerable to cross-site scripting. The vulnerability allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session. The provided...
CVE-2017-1536
IBM Support Tools for Lotus WCM IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a truste...
Reflective XSS Cross-Site Scripting Vulnerability in TRS WCM Content Collaboration Platform
The TRS WCM Content Collaboration Platform TRS WCM is a content management system. The TRS WCM Content Collaboration Platform suffers from a reflected XSS cross-site scripting vulnerability. The UserName fails to effectively filter user-submitted data, allowing an attacker to construct XSS...
XXE Vulnerability in Various TRS Products
WCM, Portal, infogate plug-ins, comment plug-ins, etc. developed by Topsy, widely used in the national government, enterprises and institutions portal system and plug-ins. TRS a variety of products mainly including: WCM, Portal, infogate plug-ins, comment plug-ins exist XXE entity injection...
TRS Infogate Plugin SSRF Vulnerability
TRS Infogate is a general-purpose plug-in developed by TORS for application on WCM and IDS platforms of national governments, enterprises and institutions. TRS Infogate plug-in page infogate/customer/system/wcmurltest.jsp SSRF vulnerability. The page in the infogate/customer/system directory can...
TRS WCM 文件读取漏洞(<=2015-12-17)
No description provided by source...
TRS wcm系统 eg_newuser_dowith.jsp XXE漏洞
No description provided by source...
TRS WCM 文件路径处理不当导致任意文件上传
No description provided by source...
Asbru Web Content Management System 9.2.7 - Multiple Vulnerabilities
Asbru Web Content Management System 9.2.7 - Multiple Vulnerabilities Asbru Web Content Management System v9.2.7 Multiple Vulnerabilities Vendor: Asbru Ltd. Product web page: http://www.asbrusoft.com Affected version: 9.2.7 Summary: Ready to use, full-featured, database-driven web content...
Asbru Web Content Management System 9.2.7 - Multiple Vulnerabilities
Exploit for jsp platform in category web applications Asbru Web Content Management System v9.2.7 Multiple Vulnerabilities Vendor: Asbru Ltd. Product web page: http://www.asbrusoft.com Affected version: 9.2.7 Summary: Ready to use, full-featured, database-driven web content management system CMS...
Asbru Web Content Management System 9.2.7 - Multiple Vulnerabilities
Asbru Web Content Management System v9.2.7 Multiple Vulnerabilities Vendor: Asbru Ltd. Product web page: http://www.asbrusoft.com Affected version: 9.2.7 Summary: Ready to use, full-featured, database-driven web content management system CMS with integrated community, databases, e-commerce and...
Asbru Web Content Management System v9.2.7 Multiple Vulnerabilities
Summary Ready to use, full-featured, database-driven web content management system CMS with integrated community, databases, e-commerce and statistics modules for creating, publishing and managing rich and user-friendly Internet, Extranet and Intranet websites. Description Asbru WCM suffers from...