Show filters
117 Total Results
Displaying 51-60 of 117
Sort by:
Attacker Value
Unknown
CVE-2020-19957
Disclosure Date: October 14, 2021 (last updated February 23, 2025)
A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the id parameter on the /dl/dl_print.php page.
0
Attacker Value
Unknown
CVE-2020-21504
Disclosure Date: October 05, 2021 (last updated February 23, 2025)
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?&m=Public&a=login.
0
Attacker Value
Unknown
CVE-2020-21505
Disclosure Date: October 05, 2021 (last updated February 23, 2025)
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php/Link/addsave.
0
Attacker Value
Unknown
CVE-2020-21503
Disclosure Date: October 05, 2021 (last updated February 23, 2025)
waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free.
0
Attacker Value
Unknown
CVE-2020-21506
Disclosure Date: October 05, 2021 (last updated February 23, 2025)
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?m=Config&a=add.
0
Attacker Value
Unknown
CVE-2020-19158
Disclosure Date: September 15, 2021 (last updated February 23, 2025)
Cross Site Scripting (XSS) in S-CMS build 20191014 and earlier allows remote attackers to execute arbitrary code via the 'Site Title' parameter of the component '/data/admin/#/app/config/'.
0
Attacker Value
Unknown
CVE-2020-19822
Disclosure Date: August 26, 2021 (last updated February 23, 2025)
A remote code execution (RCE) vulnerability in template_user.php of ZZCMS version 2018 allows attackers to execute arbitrary PHP code via the "ml" and "title" parameters.
0
Attacker Value
Unknown
CVE-2020-19705
Disclosure Date: August 26, 2021 (last updated February 23, 2025)
thinkphp-zcms as of 20190715 allows SQL injection via index.php?m=home&c=message&a=add.
0
Attacker Value
Unknown
CVE-2021-37358
Disclosure Date: August 18, 2021 (last updated February 23, 2025)
SQL Injection in SEACMS v210530 (2021-05-30) allows remote attackers to execute arbitrary code via the component "admin_ajax.php?action=checkrepeat&v_name=".
0
Attacker Value
Unknown
CVE-2021-20593
Disclosure Date: July 13, 2021 (last updated February 23, 2025)
Incorrect Implementation of Authentication Algorithm in Mitsubishi Electric Air Conditioning System/Centralized Controllers (G-50A Ver.2.50 to Ver. 3.35, GB-50A Ver.2.50 to Ver. 3.35, AG-150A-A Ver.3.20 and prior, AG-150A-J Ver.3.20 and prior, GB-50ADA-A Ver.3.20 and prior, GB-50ADA-J Ver.3.20 and prior, EB-50GU-A Ver 7.09 and prior, EB-50GU-J Ver 7.09 and prior, AE-200A Ver 7.93 and prior, AE-200E Ver 7.93 and prior, AE-50A Ver 7.93 and prior, AE-50E Ver 7.93 and prior, EW-50A Ver 7.93 and prior, EW-50E Ver 7.93 and prior, TE-200A Ver 7.93 and prior, TE-50A Ver 7.93 and prior, TW-50A Ver 7.93 and prior, CMS-RMD-J Ver.1.30 and prior) and Air Conditioning System/Expansion Controllers (PAC-YG50ECA Ver.2.20 and prior) allows a remote authenticated attacker to impersonate administrators to disclose configuration information of the air conditioning system and tamper information (e.g. operation information and configuration of air conditioning system) by exploiting this vulnerability.
0
