ImpressCMS Cross-site Scripting vulnerability via quicksearch_ContentContent parameter

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2010-4616 · ADVISORY
• ImpressCMS/impresscms · PACKAGE
• web.archive.org/web/20101223135531/http://secunia.com/advisories/42695 · WEB
• web.archive.org/web/20201209001614/http://www.securityfocus.com/archive/1/515397/100/0/threaded · WEB
• community.impresscms.org/modules/smartsection/item.php · WEB
• htbridge.ch/advisory/xss_vulnerability_in_impresscms.html · WEB
• secunia.com/advisories/42695 · Vendor Advisory
• securityfocus.com/archive/1/515397/100/0/threaded

Lỗ hổng khác của impresscms/impresscms

• CVE-2023-37785TRUNG BÌNH 4.8A cross-site scripting (XSS) vulnerability in ImpressCMS v1.4.5 and before allows attackers to execute arbitrary web scripts or HTML via a c…
• CVE-2022-26986CAO 7.2SQL Injection in ImpressCMS 1.4.3 and earlier allows remote attackers to inject into the code in unintended way, this allows an attacker to …
• CVE-2021-26601CAO 8.1ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php image_temp Directory Traversal.
• CVE-2021-26600NGHIÊM TRỌNG 9.8ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass (!= instead of !==).
• CVE-2021-26599NGHIÊM TRỌNG 9.8ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection.