66 matches found
CVE-2014-4710: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in zerouseraccount.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the Full Name field...
ZeroCMS 1.0 Cross Site Scripting
Exploit Title: Persistent ZeroCMS Cross-Site Scripting Vulnerability Discovered by: Mayuresh Dani Vendor Homepage: http://www.aas9.in/zerocms/ Software Link: https://github.com/pcx1256/zerocms/archive/master.zip Version: 1.0? Date: 2014-07-25 Tested on: Windows 7 / Mozilla Firefox Ubuntu 14.04 /...
ZeroCMS 1.0 - Persistent Cross-Site Scripting Vulnerability
No description provided by source. Exploit Title: Persistent ZeroCMS Cross-Site Scripting Vulnerability Discovered by: Mayuresh Dani Vendor Homepage: http://www.aas9.in/zerocms/ Software Link: https://github.com/pcx1256/zerocms/archive/master.zip Version: 1.0? Date: 2014-07-25 Tested on: Windows ...
ZeroCMS 1.0 /zero_transact_user.php 权限提升漏洞
No description provided by source...
ZeroCMS 1.0 - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Persistent ZeroCMS Cross-Site Scripting Vulnerability Discovered by: Mayuresh Dani Vendor Homepage: http://www.aas9.in/zerocms/ Software Link: https://github.com/pcx1256/zerocms/archive/master.zip Version: 1.0? Date: 2014-07-25...
ZeroCMS 1.0 - Persistent Cross-Site Scripting
ZeroCMS 1.0 - Persistent Cross-Site Scripting Exploit Title: Persistent ZeroCMS Cross-Site Scripting Vulnerability Discovered by: Mayuresh Dani Vendor Homepage: http://www.aas9.in/zerocms/ Software Link: https://github.com/pcx1256/zerocms/archive/master.zip Version: 1.0? Date: 2014-07-25 Tested o...
ZeroCMS 1.0 - Persistent Cross-Site Scripting
Exploit Title: Persistent ZeroCMS Cross-Site Scripting Vulnerability Discovered by: Mayuresh Dani Vendor Homepage: http://www.aas9.in/zerocms/ Software Link: https://github.com/pcx1256/zerocms/archive/master.zip Version: 1.0? Date: 2014-07-25 Tested on: Windows 7 / Mozilla Firefox Ubuntu 14.04 /...
CVE-2014-4194
SQL injection vulnerability in zerotransactarticle.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the articleid parameter in a Submit Comment action...
Sql injection
SQL injection vulnerability in zerotransactarticle.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the articleid parameter in a Submit Comment action...
CVE-2014-4194
SQL injection vulnerability in zerotransactarticle.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the articleid parameter in a Submit Comment action...
CVE-2014-4194
ZeroCMS 1.0 is affected by an SQL injection in zero_transact_article.php via the article_id POST parameter in the Submit Comment action. The vulnerability arises from unsanitized input, enabling remote attackers to execute arbitrary SQL commands and potentially access or manipulate the database. ...
PT-2014-5728
Name of the Vulnerable Software and Affected Versions ZeroCMS version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the article id parameter in a Submit Comment action, specifically targeting the zero transact article.php file...
CVE-2014-4194: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in zerotransactarticle.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the articleid parameter in a Submit Comment action...
CVE-2014-4195
Cross-site scripting XSS vulnerability in zeroviewarticle.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the articleid parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in zeroviewarticle.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the articleid parameter...
CVE-2014-4195
Cross-site scripting XSS vulnerability in zeroviewarticle.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the articleid parameter...
CVE-2014-4195
CVE-2014-4195 describes an XSS vulnerability in ZeroCMS 1.0, where the parameter article_id in zero_view_article.php can be exploited to inject arbitrary web script or HTML. The entry (NVD, CVSS v2 base score 4.3, Medium) indicates the issue is exploitable via network with no authentication, with...
PT-2014-5729
Name of the Vulnerable Software and Affected Versions ZeroCMS version 1.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the article id parameter in the zero view article.php file. Recommendations For...
CVE-2014-4195: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in zeroviewarticle.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the articleid parameter...