Show filters
117 Total Results
Displaying 101-110 of 117
Sort by:
Attacker Value
Unknown
MFSBGN03810 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF
Disclosure Date: June 16, 2018 (last updated November 08, 2023)
Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Server version DDM Content Pack V 10.20, 10.21, 10.22, 10.22 CUP7, 10.30, 10.31, 10.32, 10.33, 10.33 CUP2, 11.0 and CMS Server version 2018.05 BACKGROUND which could allow for remote unsafe deserialization and cross-site request forgery (CSRF).
0
Attacker Value
Unknown
CVE-2018-10503
Disclosure Date: April 27, 2018 (last updated November 26, 2024)
An issue was discovered in index.php in baijiacms V4 v4_1_4_20170105. CSRF allows adding an administrator account via op=edituser, changing the administrator password via op=changepwd, or deleting an account via op=deleteuser.
0
Attacker Value
Unknown
CVE-2014-8703
Disclosure Date: March 17, 2017 (last updated November 26, 2024)
Cross-site scripting (XSS) vulnerability in Wonder CMS 2014 allows remote attackers to inject arbitrary web script or HTML.
0
Attacker Value
Unknown
CVE-2014-8701
Disclosure Date: March 17, 2017 (last updated November 26, 2024)
Wonder CMS 2014 allows remote attackers to obtain sensitive information by viewing /files/password, which reveals the unsalted MD5 hashed password.
0
Attacker Value
Unknown
CVE-2014-8702
Disclosure Date: March 17, 2017 (last updated November 26, 2024)
Wonder CMS 2014 allows remote attackers to obtain sensitive information by logging into the application with an array for the password, which reveals the installation path in an error message.
0
Attacker Value
Unknown
CVE-2014-8705
Disclosure Date: March 17, 2017 (last updated November 26, 2024)
PHP remote file inclusion vulnerability in editInplace.php in Wonder CMS 2014 allows remote attackers to execute arbitrary PHP code via a URL in the hook parameter.
0
Attacker Value
Unknown
CVE-2014-8704
Disclosure Date: March 17, 2017 (last updated November 26, 2024)
Directory traversal vulnerability in index.php in Wonder CMS 2014 allows remote attackers to include and execute arbitrary local files via a crafted theme.
0
Attacker Value
Unknown
CVE-2011-4918
Disclosure Date: August 29, 2012 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Elxis CMS 2009.2, 2009.3 and 2009.3 Aphrodite before revision 2684 allow remote attackers to inject arbitrary web script or HTML via the (1) task parameter to elxis/index.php, and (2) PATH_INFO to elxis/administrator/index.php.
0
Attacker Value
Unknown
CVE-2011-0644
Disclosure Date: January 25, 2011 (last updated October 04, 2023)
SQL injection vulnerability in include/admin/model_field.class.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the modelid parameter to flash_upload.php.
0
Attacker Value
Unknown
CVE-2011-0645
Disclosure Date: January 25, 2011 (last updated October 04, 2023)
SQL injection vulnerability in data.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the where_time parameter in a get action.
0
