CVE-2018-14837

Wolf CMS 0.8.3.1 has XSS in the Snippets tab, as demonstrated by a ?/admin/snippet/edit/1 URI...

CVE-2018-14837

Wolf CMS 0.8.3.1 has XSS in the Snippets tab, as demonstrated by a ?/admin/snippet/edit/1 URI...

CVE-2018-14837

CVE-2018-14837 — Wolf CMS 0.8.3.1 is confirmed to have a cross-site scripting (XSS) vulnerability in the Snippets tab, demonstrated via the /admin/snippet/edit/1 URI. The linked documents consistently describe the affected product and vest the issue as an XSS flaw; no explicit root-cause details,...

CVE-2018-14837

Wolf CMS 0.8.3.1 has XSS in the Snippets tab, as demonstrated by a ?/admin/snippet/edit/1 URI...

Wolf CMS Cross-Site Request Forgery Vulnerability

Wolf CMS is a PHP-based open source content management system CMS developed by the Wolf CMS team. The system provides user interface , templates , user management and rights management and other functions . A cross-site request forgery vulnerability exists in Wolf CMS version 0.8.3.1. A remote...

Wolf CMS Cross-Site Scripting Vulnerability (CNVD-2018-05819)

Wolf CMS is a PHP-based open source content management system CMS developed by the Wolf CMS team. The system provides user interface , templates , user management and rights management and other functions . A cross-site scripting vulnerability exists in Wolf CMS version 0.8.3.1. A remote attacker...

CVE-2018-6890

Cross-site scripting XSS vulnerability in Wolf CMS 0.8.3.1 via the page editing feature, as demonstrated by /?/admin/page/edit/3...

CVE-2018-6890

Cross-site scripting XSS vulnerability in Wolf CMS 0.8.3.1 via the page editing feature, as demonstrated by /?/admin/page/edit/3...

Cross site scripting

Cross-site scripting XSS vulnerability in Wolf CMS 0.8.3.1 via the page editing feature, as demonstrated by /?/admin/page/edit/3...

CVE-2018-6890

Cross-site scripting XSS vulnerability in Wolf CMS 0.8.3.1 via the page editing feature, as demonstrated by /?/admin/page/edit/3...

CVE-2018-6890

Wolf CMS 0.8.3.1 is affected by a Cross-Site Scripting (XSS) vulnerability via the page editing feature (/?/admin/page/edit/3). The issue is documented in CVE-2018-6890 with both NVD and CNVD entries confirming an XSS flaw in Wolf CMS 0.8.3.1. The connected sources corroborate that the vulnerabil...

Wolf CMS Cross-Site Scripting Vulnerability (CNVD-2017-32959)

Wolf CMS is a PHP-based open source content management system CMS developed by the Wolf CMS team. The system provides user interface , templates , user management and rights management and other functions . A cross-site scripting vulnerability exists in Wolf CMS version 0.8.3.1, which stems from...

Cross site scripting

Wolf CMS 0.8.3.1 allows Cross-Site Scripting XSS attacks. The vulnerability exists due to insufficient sanitization of the file name in a "create-file-popup" action, and the directory name in a "create-directory-popup" action, in the HTTP POST method to the "/plugin/filemanager/" script aka an...

CVE-2017-11611

Wolf CMS 0.8.3.1 allows Cross-Site Scripting XSS attacks. The vulnerability exists due to insufficient sanitization of the file name in a "create-file-popup" action, and the directory name in a "create-directory-popup" action, in the HTTP POST method to the "/plugin/filemanager/" script aka an...

CVE-2017-11611

Wolf CMS 0.8.3.1 allows Cross-Site Scripting XSS attacks. The vulnerability exists due to insufficient sanitization of the file name in a "create-file-popup" action, and the directory name in a "create-directory-popup" action, in the HTTP POST method to the "/plugin/filemanager/" script aka an...

CVE-2017-11611

CVE-2017-11611 affects Wolf CMS 0.8.3.1. The flaw is an XSS vulnerability arising from insufficient sanitization of user-supplied names in the file manager: specifically the file name in the create-file-popup action and the directory name in the create-directory-popup action, transmitted via HTTP...

CVE-2017-11611

Wolf CMS 0.8.3.1 allows Cross-Site Scripting XSS attacks. The vulnerability exists due to insufficient sanitization of the file name in a "create-file-popup" action, and the directory name in a "create-directory-popup" action, in the HTTP POST method to the "/plugin/filemanager/" script aka an...

Wolf CMS both the old and new version of the file upload vulnerability analysis-vulnerability warning-the black bar safety net

A Wolfcms description Wolf CMS is a Content Management System CMS, is in the GNUGeneral Public License v3 released under the free software. Wolf CMS is made in PHP language, is Frog CMS a branch. In 2010, Packet Publishing open source projects, the award of“Most Promising Open Source...

Unrestricted file upload

Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/filemanager/browse/ aka the filemanager does not validate the parameter "filename" properly. Exploitation requires a registered user who has access to upload functionality...

CVE-2015-6567

Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/filemanager/browse/ aka the filemanager does not validate the parameter "filename" properly. Exploitation requires a registered user who has access to upload functionality...