Search vulnerabilities

Expected end of text, found '/' (at char 38), (line:1, col:39)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,120

CVE-2022-38296

Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager.

CVSS 3.1 · 9.8 Critical EPSS 4.7% KEV · Not listed
Vendors
Cuppacms
Products
Cuppacms
CVE-2022-38295

Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /table_manager/view/cu_user_groups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function.

CVSS 3.1 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Cuppacms
Products
Cuppacms
CVE-2022-38292

SLiMS Senayan Library Management System v9.4.2 was discovered to contain multiple Server-Side Request Forgeries via the components /bibliography/marcsru.php and /bibliography/z3950sru.php.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Slims
Products
Senayan Library Management System
CVE-2022-38291

SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Search function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search bar.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Slims
Products
Senayan Library Management System
CVE-2022-38284

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-38282

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-38279

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-38278

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list.

CVSS 3.1 · 7.2 High EPSS 1.2% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-38277

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-38276

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-38273

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms