CVE-2018-6890

Wolf CMS 0.8.3.1 is affected by a Cross-Site Scripting (XSS) vulnerability via the page editing feature (/?/admin/page/edit/3). The issue is documented in CVE-2018-6890 with both NVD and CNVD entries confirming an XSS flaw in Wolf CMS 0.8.3.1. The connected sources corroborate that the vulnerabil...

CVE-2018-6890

Cross-site scripting XSS vulnerability in Wolf CMS 0.8.3.1 via the page editing feature, as demonstrated by /?/admin/page/edit/3...

PT-2018-17805

Name of the Vulnerable Software and Affected Versions Wolf CMS version 0.8.3.1 Description A cross-site scripting XSS issue exists in the page editing feature. This can be demonstrated via the "/?/admin/page/edit/3" API endpoint. Recommendations For version 0.8.3.1, consider disabling the page...

CVE-2018-6890: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Wolf CMS 0.8.3.1 via the page editing feature, as demonstrated by /?/admin/page/edit/3...

Wolf CMS Cross-Site Scripting Vulnerability (CNVD-2017-32959)

Wolf CMS is a PHP-based open source content management system CMS developed by the Wolf CMS team. The system provides user interface , templates , user management and rights management and other functions . A cross-site scripting vulnerability exists in Wolf CMS version 0.8.3.1, which stems from...

Cross site scripting

Wolf CMS 0.8.3.1 allows Cross-Site Scripting XSS attacks. The vulnerability exists due to insufficient sanitization of the file name in a "create-file-popup" action, and the directory name in a "create-directory-popup" action, in the HTTP POST method to the "/plugin/filemanager/" script aka an...

CVE-2017-11611

Wolf CMS 0.8.3.1 allows Cross-Site Scripting XSS attacks. The vulnerability exists due to insufficient sanitization of the file name in a "create-file-popup" action, and the directory name in a "create-directory-popup" action, in the HTTP POST method to the "/plugin/filemanager/" script aka an...

CVE-2017-11611

Wolf CMS 0.8.3.1 allows Cross-Site Scripting XSS attacks. The vulnerability exists due to insufficient sanitization of the file name in a "create-file-popup" action, and the directory name in a "create-directory-popup" action, in the HTTP POST method to the "/plugin/filemanager/" script aka an...

CVE-2017-11611

Wolf CMS 0.8.3.1 allows Cross-Site Scripting XSS attacks. The vulnerability exists due to insufficient sanitization of the file name in a "create-file-popup" action, and the directory name in a "create-directory-popup" action, in the HTTP POST method to the "/plugin/filemanager/" script aka an...

CVE-2017-11611

CVE-2017-11611 affects Wolf CMS 0.8.3.1. The flaw is an XSS vulnerability arising from insufficient sanitization of user-supplied names in the file manager: specifically the file name in the create-file-popup action and the directory name in the create-directory-popup action, transmitted via HTTP...

PT-2017-12134

Name of the Vulnerable Software and Affected Versions Wolf CMS version 0.8.3.1 Description The issue arises due to insufficient sanitization of the file name in a "create-file-popup" action and the directory name in a "create-directory-popup" action. This occurs in the HTTP POST method to the...

CVE-2017-11611: Improper Neutralization of Input During Web Page Generation

Wolf CMS 0.8.3.1 allows Cross-Site Scripting XSS attacks. The vulnerability exists due to insufficient sanitization of the file name in a "create-file-popup" action, and the directory name in a "create-directory-popup" action, in the HTTP POST method to the "/plugin/filemanager/" script aka an...

Wolf CMS both the old and new version of the file upload vulnerability analysis-vulnerability warning-the black bar safety net

A Wolfcms description Wolf CMS is a Content Management System CMS, is in the GNUGeneral Public License v3 released under the free software. Wolf CMS is made in PHP language, is Frog CMS a branch. In 2010, Packet Publishing open source projects, the award of“Most Promising Open Source...

Arbitrary File Write Vulnerability in Wolf CMS 0.8.3.1 Backend

Wolf CMS is a lightweight CMS program written in PHP. The latest version of Wolf CMS, version 0.8.3.1, has an arbitrary file write vulnerability in the backend, which can be exploited to create files with arbitrary suffixes and write arbitrary content. An attacker can use this vulnerability to...

DEBIAN-CVE-2017-8855

wolfSSL before 3.11.0 does not prevent wcDhAgree from accepting a malformed DH key...

Unrestricted file upload

Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/filemanager/browse/ aka the filemanager does not validate the parameter "filename" properly. Exploitation requires a registered user who has access to upload functionality...

Unrestricted file upload

Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/filemanager/browse/ aka the filemanager does not prevent a change of a file extension to ".php" after originally using the parameter "filename" for uploading a JPEG image. Exploitation requires a...

CVE-2015-6568

Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/filemanager/browse/ aka the filemanager does not prevent a change of a file extension to ".php" after originally using the parameter "filename" for uploading a JPEG image. Exploitation requires a...

CVE-2015-6567

Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/filemanager/browse/ aka the filemanager does not validate the parameter "filename" properly. Exploitation requires a registered user who has access to upload functionality...

CVE-2015-6567

Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/filemanager/browse/ aka the filemanager does not validate the parameter "filename" properly. Exploitation requires a registered user who has access to upload functionality...