|
209331
|
6.1 |
MEDIUM
Network
|
waimai_super_cms_project
|
waimai_super_cms
|
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php/Link/addsave.
|
CWE-79
Cross-site Scripting
|
CVE-2020-21505
|
2024-11-21 14:12 |
2021-10-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209332
|
6.1 |
MEDIUM
Network
|
waimai_super_cms_project
|
waimai_super_cms
|
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?&m=Public&a=login.
|
CWE-79
Cross-site Scripting
|
CVE-2020-21504
|
2024-11-21 14:12 |
2021-10-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209333
|
7.5 |
HIGH
Network
|
waimai_super_cms_project
|
waimai_super_cms
|
waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parame…
|
CWE-668
Exposure of Resource to Wrong Sphere
|
CVE-2020-21503
|
2024-11-21 14:12 |
2021-10-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209334
|
6.1 |
MEDIUM
Network
|
xiuno
|
xiunobbs
|
A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitebrief parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2020-21496
|
2024-11-21 14:12 |
2021-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209335
|
6.1 |
MEDIUM
Network
|
xiuno
|
xiunobbs
|
A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitename parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2020-21495
|
2024-11-21 14:12 |
2021-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209336
|
6.1 |
MEDIUM
Network
|
xiuno
|
xiunobbs
|
A cross-site scripting (XSS) vulnerability in the component install\install.sql of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via changing the doctype value to 0.
|
CWE-79
Cross-site Scripting
|
CVE-2020-21494
|
2024-11-21 14:12 |
2021-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209337
|
5.3 |
MEDIUM
Network
|
xiuno
|
xiunobbs
|
An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames.
|
NVD-CWE-noinfo
|
CVE-2020-21493
|
2024-11-21 14:12 |
2021-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209338
|
5.4 |
MEDIUM
Network
|
maccms
|
maccms
|
Maccms 10 contains a cross-site scripting (XSS) vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field.
|
CWE-79
Cross-site Scripting
|
CVE-2020-21434
|
2024-11-21 14:12 |
2021-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209339
|
6.5 |
MEDIUM
Network
|
hongcms_project
|
hongcms
|
HongCMS v3.0 contains an arbitrary file read and write vulnerability in the component /admin/index.php/template/edit.
|
NVD-CWE-noinfo
|
CVE-2020-21431
|
2024-11-21 14:12 |
2021-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209340
|
6.1 |
MEDIUM
Network
|
maccms
|
maccms
|
A cross-site scripting (XSS) vulnerability in the parameter type_en of Maccms 10 allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload.
|
CWE-79
Cross-site Scripting
|
CVE-2020-21387
|
2024-11-21 14:12 |
2021-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|