|
210481
|
6.1 |
MEDIUM
Network
|
xiuno
|
xiunobbs
|
A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitename parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2020-21495
|
2024-11-21 14:12 |
2021-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210482
|
6.1 |
MEDIUM
Network
|
xiuno
|
xiunobbs
|
A cross-site scripting (XSS) vulnerability in the component install\install.sql of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via changing the doctype value to 0.
|
CWE-79
Cross-site Scripting
|
CVE-2020-21494
|
2024-11-21 14:12 |
2021-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210483
|
5.3 |
MEDIUM
Network
|
xiuno
|
xiunobbs
|
An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames.
|
NVD-CWE-noinfo
|
CVE-2020-21493
|
2024-11-21 14:12 |
2021-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210484
|
5.4 |
MEDIUM
Network
|
maccms
|
maccms
|
Maccms 10 contains a cross-site scripting (XSS) vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field.
|
CWE-79
Cross-site Scripting
|
CVE-2020-21434
|
2024-11-21 14:12 |
2021-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210485
|
6.5 |
MEDIUM
Network
|
hongcms_project
|
hongcms
|
HongCMS v3.0 contains an arbitrary file read and write vulnerability in the component /admin/index.php/template/edit.
|
NVD-CWE-noinfo
|
CVE-2020-21431
|
2024-11-21 14:12 |
2021-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210486
|
6.1 |
MEDIUM
Network
|
maccms
|
maccms
|
A cross-site scripting (XSS) vulnerability in the parameter type_en of Maccms 10 allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload.
|
CWE-79
Cross-site Scripting
|
CVE-2020-21387
|
2024-11-21 14:12 |
2021-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210487
|
8.8 |
HIGH
Network
|
maccms
|
maccms
|
A Cross-Site Request Forgery (CSRF) in the component admin.php/admin/type/info.html of Maccms 10 allows attackers to gain administrator privileges.
|
CWE-352
Origin Validation Error
|
CVE-2020-21386
|
2024-11-21 14:12 |
2021-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210488
|
6.1 |
MEDIUM
Network
|
jizhicms
|
jizhicms
|
JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the component /user/release.html, which allows attackers to arbitrarily add an administrator cookie.
|
CWE-79
Cross-site Scripting
|
CVE-2020-21228
|
2024-11-21 14:12 |
2021-10-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210489
|
6.5 |
MEDIUM
Network
|
emlog
|
emlog
|
emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php.
|
NVD-CWE-noinfo
|
CVE-2020-21014
|
2024-11-21 14:12 |
2021-10-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210490
|
7.2 |
HIGH
Network
|
emlog
|
emlog
|
emlog v6.0.0 contains a SQL injection via /admin/comment.php.
|
CWE-89
SQL Injection
|
CVE-2020-21013
|
2024-11-21 14:12 |
2021-10-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|