Clansphere cross-site scripting vulnerability (CNVD-2021-22962)

ClanSphere is a modular Web-CMS. A cross-site scripting vulnerability exists in Clansphere 2011.4. The vulnerability can be exploited to inject JavaScript via the "language" parameter...

Clansphere Cross-Site Scripting Vulnerability

ClanSphere is a modular Web-CMS. A cross-site scripting vulnerability exists in Clansphere 2011.4. The vulnerability can be exploited to inject JavaScript via the "module" parameter...

CVE-2021-21359

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.25, 10.4.14, 11.1.1 requesting invalid or non-existing resources via HTTP triggers the page error handler which again could retrieve content to be shown as error message from another page. This leads to ...

Cross site scripting

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 10.4.14, 11.1.1 it has been discovered that the Form Designer backend module of the Form Framework is vulnerable to cross-site scripting. A valid backend user account with access to the form module is needed...

Batflat Code Injection Vulnerability

Batflat is a free lightweight, fast and simple CMS from Batflat. A code injection vulnerability exists in Batflat 1.3.6 that stems from the failure of a web system or product to properly filter specific elements of externally entered data during the construction of a code snippet. An attacker cou...

Command Execution Vulnerability in Extreme CMS Pl***.php File

Extreme CMS is an open source and free PHPCMS web content management system. A command execution vulnerability exists in the Extreme CMS Pl.php file. An attacker can exploit this vulnerability to gain server privileges...

CVE-2020-6272

SAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs, which allows an authenticated and authorized content manager to inject malicious script into several web CMS components. These can be saved and later triggered, if an affected web page is visited,...

CVE-2020-6272

SAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs, which allows an authenticated and authorized content manager to inject malicious script into several web CMS components. These can be saved and later triggered, if an affected web page is visited,...

Cross site scripting

SAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs, which allows an authenticated and authorized content manager to inject malicious script into several web CMS components. These can be saved and later triggered, if an affected web page is visited,...

Sellacious eCommerce - Multiple Persistent Vulnerabilities

Document Title: =============== Sellacious eCommerce - Multiple Persistent Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2226 Release Date: ============= 2020-05-07 Vulnerability Laboratory ID VL-ID: ===================================...

Arbitrary File Deletion Vulnerability in Acme CMS

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. Acme CMS has an arbitrary file deletion vulnerability, attackers can construct packets sent to the server, so as to delete arbitrary files,...

zzzcms V1.5.7 php official version of the back-end code execution vulnerabilities exist

zzcms is a free and open source building system, mainly facing the majority of webmasters to use. zzzcms V1.5.7 php official version of the background sa.php file editfile function there is a code execution vulnerability, an attacker can take advantage of the vulnerability to execute arbitrary co...

ZZCMS V8.2 has arbitrary file deletion vulnerability

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. ZZCMS V8.2 has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete arbitrary files...

File Inclusion Vulnerability in Bluecoat CMS

Lanco CMS is a website building system developed with PHP+MYSQL technology and MVC model. BlueTech CMS has a file inclusion vulnerability that can be exploited by attackers to obtain source code...

EditMe CMS - Cross-Site Request Forgery (Add Admin)

Document Title: =============== EditMe CMS - CSRF Privilege Escalate Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1996 Release Date: ============= 2016-11-14 Vulnerability Laboratory ID VL-ID: ==================================== 19...

CMS EditMe Cross Site Request Forgery

===================================================== Exploit Title : CMS EditMe - Privilege Escalate CSRF Vulnerability Date Discovered : 2016-11-04 Affected Products: EditMe - Content Management System Exploitation Technique: Remote Severity Level: Medium Tested OS : Windows 10...

Dorsa Web CMS SQL Injection Vulnerability

A remote SQL injection vulnerability exists in Dorsa Web CMS. A remote attacker is able to execute malicious sql commands to connect to dbms...

Redaxo CMS has multiple vulnerabilities

Redaxo CMS is an open source Web portal content management system CMS. The system supports custom modules , plug-in extensions , project backup and so on. SQL injection and cross-site scripting vulnerabilities exist in Redaxo CMS , allowing attackers to exploit the vulnerabilities to execute...

Dorsa Web CMS - Multiple SQL Injection Vulnerabilities

Document Title: =============== Dorsa Web CMS - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1807 Release Date: ============= 2016-03-31 Vulnerability Laboratory ID VL-ID: ==================================== 180...

Dorsa Web CMS 2016 Q1 SQL Injection

Document Title: =============== Dorsa Web CMS - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1807 Release Date: ============= 2016-03-31 Vulnerability Laboratory ID VL-ID: ==================================== 180...