Search vulnerabilities

Expected end of text, found ',' (at char 23), (line:1, col:24)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,803

CVE-2018-14973

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/product.php has XSS.

CVSS 3.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Q-cms
Products
Qcms
CVE-2018-14972

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/down.php has XSS.

CVSS 3.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Q-cms
Products
Qcms
CVE-2018-14971

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/user.php has XSS.

CVSS 3.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Q-cms
Products
Qcms
CVE-2018-14970

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/slideshow.php has XSS.

CVSS 3.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Q-cms
Products
Qcms
CVE-2018-14969

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/system.php has XSS.

CVSS 3.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Q-cms
Products
Qcms
CVE-2018-14968

An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.address.php has SQL Injection via the numPerPage parameter.

CVSS 3.0 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Emlsoft Project
Products
Emlsoft
CVE-2018-14967

An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.user.php has SQL Injection via the numPerPage parameter.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Emlsoft Project
Products
Emlsoft
CVE-2018-14966

An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=user&do=add page allows CSRF.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Emlsoft Project
Products
Emlsoft
CVE-2018-14965

An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=address&do=add page allows CSRF.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Emlsoft Project
Products
Emlsoft
CVE-2018-14964

An issue was discovered in EMLsoft 5.4.5. XSS exists via the eml/upload/eml/?action=address&do=edit page.

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Emlsoft Project
Products
Emlsoft
CVE-2018-14963

zzcms 8.3 has CSRF via the admin/adminadd.php?action=add URI.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Zzcms
Products
Zzcms
CVE-2018-14962

zzcms 8.3 has stored XSS related to the content variable in user/manage.php and zt/show.php.

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Zzcms
Products
Zzcms
CVE-2018-14961

dl/dl_sendmail.php in zzcms 8.3 has SQL Injection via the sql parameter.

CVSS 3.0 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Zzcms
Products
Zzcms
CVE-2018-14958

An issue was discovered in WeaselCMS v0.3.5. CSRF can update the website settings (such as the theme, title, and description) via index.php.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Weaselcms Project
Products
Weaselcms
CVE-2018-14957

CMS ISWEB 3.5.3 is vulnerable to directory traversal and local file download, as demonstrated by moduli/downloadFile.php?file=oggetto_documenti/../.././inc/config.php (one can take the control of the application because credentials are present in that config.php file).

CVSS 3.0 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Isweb
Products
Isweb
CVE-2018-14956

CMS ISWEB 3.5.3 is vulnerable to multiple SQL injection flaws. An attacker can inject malicious queries into the application and obtain sensitive information.

CVSS 3.0 · 9.8 Critical EPSS 2.6% KEV · Not listed
Vendors
Isweb
Products
Isweb
CVE-2018-14955

squirrelmail: persistent XSS in message display via SVG animations

The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate to attribute).

CVSS 3.0 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Squirrelmail
Products
Squirrelmail
CVE-2018-14954

squirrelmail: persistent XSS in message display the formaction attribute

The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute.

CVSS 3.0 · 6.1 Medium EPSS 1.6% KEV · Not listed
Vendors
Squirrelmail
Products
Squirrelmail