61 matches found
CVE-2018-16250
The "utilisateur" menu in Creatiwity wityCMS 0.6.2 modifies the presence of XSS at two input points for user information, with the "first name" and "last name" parameters...
CVE-2018-16251
A "search for user discovery" injection issue exists in Creatiwity wityCMS 0.6.2 via the "Utilisateur" menu. No input parameters are filtered, e.g., the /admin/user/users Nickname, email, firstname, lastname, and groupe parameters...
CVE-2018-16250
The "utilisateur" menu in Creatiwity wityCMS 0.6.2 modifies the presence of XSS at two input points for user information, with the "first name" and "last name" parameters...
Cross site scripting
The "utilisateur" menu in Creatiwity wityCMS 0.6.2 modifies the presence of XSS at two input points for user information, with the "first name" and "last name" parameters...
Design/Logic Flaw
A "search for user discovery" injection issue exists in Creatiwity wityCMS 0.6.2 via the "Utilisateur" menu. No input parameters are filtered, e.g., the /admin/user/users Nickname, email, firstname, lastname, and groupe parameters...
CVE-2018-16250
The "utilisateur" menu in Creatiwity wityCMS 0.6.2 modifies the presence of XSS at two input points for user information, with the "first name" and "last name" parameters...
CVE-2018-16250
CVE-2018-16250 affects Creatiwity wityCMS 0.6.2. The vulnerability lies in the utilisateur menu where XSS is introduced at two input points for user information (first name and last name). Several sources (CNVD-2019-19292, RH:CVE, NVD entry) describe it as lack of proper validation of client-side...
CVE-2018-16251
A "search for user discovery" injection issue exists in Creatiwity wityCMS 0.6.2 via the "Utilisateur" menu. No input parameters are filtered, e.g., the /admin/user/users Nickname, email, firstname, lastname, and groupe parameters...
CVE-2018-16251
CVE-2018-16251 : In Creatiwity wityCMS 0.6.2, an injection vulnerability exists in the administrator user discovery path via the Utillisateur menu. The issue arises because several user-related inputs (Nickname, email, firstname, lastname, groupe) are not filtered in the /admin/user/users interfa...
xss vulnerability in wityCMS
wityCMS is a lightweight PHP-based model-view-controller-oriented content management system CMS An xss vulnerability exists in wityCMS, which can be exploited by an attacker to obtain an administrator cookie...
SQL Injection Vulnerability in wityCMS
wityCMS is a lightweight PHP-based model-view-controller-oriented content management system CMS A SQL injection vulnerability exists in wityCMS, which can be exploited by attackers to obtain sensitive information from the database...
CVE-2018-16776
wityCMS 0.6.2 has XSS via the "Site Name" field found in the "Contact" "Configuration" page...
CVE-2018-16776
wityCMS 0.6.2 has XSS via the "Site Name" field found in the "Contact" "Configuration" page...
Cross site scripting
wityCMS 0.6.2 has XSS via the "Site Name" field found in the "Contact" "Configuration" page...
CVE-2018-16776
wityCMS 0.6.2 has XSS via the "Site Name" field found in the "Contact" "Configuration" page...
CVE-2018-16776
CVE-2018-16776 affects wityCMS 0.6.2 with a reflected XSS via the Site Name field on the Contact Configuration page. The connected documents confirm the vulnerability but do not provide exploitation details, specific root cause analysis, affected versions beyond 0.6.2, or remediation steps. No in...
WityCMS 0.6.2 - Cross-Site Request Forgery (Password Change)
WityCMS 0.6.2 - Cross-Site Request Forgery Password Change input type="hidden" name="groupe"...
WityCMS 0.6.2 Cross Site Request Forgery
...
