CVE-2020-20982

Cross Site Scripting XSS vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain escalated privileges, via the backurl parameter to /php/passport/index.php...

shadow 跨站脚本漏洞

shadow is a suite of tools for maintaining Debian systems. A cross-site scripting vulnerability exists in shadow web wdja, which stems from the product's /php/passport/index.php file failing to properly handle data in the backurl parameter. An attacker could use this vulnerability to execute...

CVE-2020-21658

A Cross-Site Request Forgery CSRF in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL...

CVE-2020-21658

A Cross-Site Request Forgery CSRF in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL...

CVE-2020-21648

WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php...

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL...

Arbitrary file deletion

WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php...

CVE-2020-21658

The CVE-2020-21658 entry describes a CSRF vulnerability in WDJA CMS v1.5.2 that allows an attacker to arbitrarily add administrator accounts via a crafted URL. Affected product/version: WDJA CMS 1.5.2. Root cause: insufficient CSRF protection on account-creation/administrator-adding functionality...

CVE-2020-21658

A Cross-Site Request Forgery CSRF in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL...

CVE-2020-21648

WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php...

CVE-2020-21648

CVE-2020-21648 affects WDJA CMS v1.5.2 with an arbitrary file deletion vulnerability in admin/cache/manage.php. The issue is documented across multiple sources (NVD/Red Hat/CVE). The root cause details are not provided beyond the vulnerability location; impact is deletion of arbitrary files. CVSS...

Wdja 访问控制错误漏洞

Wdja is a Php-based content management system from the Wdja team. An Access Control Error vulnerability exists in WDJA CMS, which stems from the product not restricting file deletion operations in admin/cache/manage.php. The vulnerability can be exploited to delete arbitrary files. The following...

Wdja 跨站请求伪造漏洞

Wdja is a Php-based content management system from the Wdja team. A cross-site request forgery vulnerability exists in WDJA CMS that stems from the product's account add feature failing to adequately validate that the request originated from a trusted user. The vulnerability can be exploited to a...

XSS Vulnerability in WDJA Web Content Management System

WDJA website content management system based on PHP JTBC1.0 development, can be free to apply to individuals, enterprises, organizations and other commercial areas. An XSS vulnerability exists in WDJA Web Content Management System, which can be exploited by an attacker to obtain an administrator...

SQL Injection Vulnerability in WDJA Web Content Management System

WDJA Web Content Management System is a set of existing modules can be expanded and cloned PHP open source CMS system , using UTF-8 encoding , to take the language/code/program two separate technical modes . WDJA Web Content Management System has a SQL injection vulnerability that can be exploite...

Wdja Cross-Site Scripting Vulnerability

Wdja is a Php-based content management system from the Wdja team. A cross-site scripting vulnerability exists in WDJA CMS version 1.5, where the vulnerability tongji parameter does not do XSS filtering on user input, which can be exploited by an attacker to steal user credentials...

CVE-2020-23631

Cross-site request forgery CSRF in admin/global/manage.php in WDJA CMS 1.5 allows remote attackers to conduct cross-site scripting XSS attacks via the tongji parameter...

Cross site request forgery (csrf)

Cross-site request forgery CSRF in admin/global/manage.php in WDJA CMS 1.5 allows remote attackers to conduct cross-site scripting XSS attacks via the tongji parameter...

CVE-2020-23631

Cross-site request forgery CSRF in admin/global/manage.php in WDJA CMS 1.5 allows remote attackers to conduct cross-site scripting XSS attacks via the tongji parameter...

CVE-2020-23631

CVE-2020-23631 affects WDJA CMS 1.5, where a flaw in admin/global/manage.php allows CSRF that can enable cross-site scripting via the tongji parameter. The impact described is XSS; no exploitation details or patch/version remediation are provided in the supplied documents. If present, mitigation ...