Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-20699 State: PUBLISHED Published: 2021-07-27T22:19:29 Last Updated: 2024-08-04T14:22:25.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross site scripting (XSS) vulnerability in S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Copyright text box under Basic Settings. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Peithon/xss/blob/master/readme.md
CVE ID: CVE-2020-20700 State: PUBLISHED Published: 2021-07-27T22:19:30 Last Updated: 2024-08-04T14:22:25.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in /app/form_add/of S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Title Entry text box. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Peithon/recycle_XSS/blob/master/readme.md
CVE ID: CVE-2020-20701 State: PUBLISHED Published: 2021-07-27T22:19:31 Last Updated: 2024-08-04T14:22:25.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in /app/config/of S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Peithon/site_XSS/blob/master/readme.md
CVE ID: CVE-2020-20703 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-10T18:01:46.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vim/vim/issues/5041
CVE ID: CVE-2020-20718 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-10T17:58:40.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to the the save_file() parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pluck-cms/pluck/issues/79
CVE ID: CVE-2020-20725 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-11T17:07:15.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in taogogo taoCMS v.2.5 beta5.1 allows remote attacker to execute arbitrary code via the name field in admin.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/taogogo/taocms/issues/2
CVE ID: CVE-2020-20726 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-11T14:52:14.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery vulnerability in Gila GilaCMS v.1.11.4 allows a remote attacker to execute arbitrary code via the cm/update_rows/user parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GilaCMS/gila/issues/51
CVE ID: CVE-2020-20735 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-10T17:44:25.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in LJCMS v.4.3.R60321 allows a remote attacker to execute arbitrary code via the ljcms/index.php parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/0xyu/PHP_Learning/issues/2
CVE ID: CVE-2020-20739 State: PUBLISHED Published: 2020-11-20T18:16:00 Last Updated: 2024-08-04T14:22:25.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: im_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the leakage of remote server path or stack address. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libvips/libvips/issues/1419 - https://github.com/libvips/libvips/commit/2ab5aa7bf515135c2b02d42e9a72e4c98e17031a - https://lists.debian.org/debian-lts-announce/2020/11/msg00049.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.o
-announce/2020/11/msg00049.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZULVPQQ4QDFSQCXFYBUXEM7UXJAOKLSP/
CVE ID: CVE-2020-20740 State: PUBLISHED Published: 2020-11-20T18:16:03 Last Updated: 2024-08-04T14:22:25.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: PDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in pdf_get_version(). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/enferex/pdfresurrect/issues/14 - https://github.com/enferex/pdfresurrect/commit/1b422459f07353adce2878806d5247d9e91fb397 - https://lists.debian.org/debian-lts-announce/2020/12/msg00002.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZOIEVFM3SIMAEOFJKKMYH2TLZ7PXLSUD/ - https://lists.
.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZOIEVFM3SIMAEOFJKKMYH2TLZ7PXLSUD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEEEPBBGER5LPABBRVZLMCC6Z24RBXW/
CVE ID: CVE-2020-20741 State: PUBLISHED Published: 2021-07-23T19:25:46 Last Updated: 2024-08-04T14:22:25.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Access Control in Beckhoff Automation GmbH & Co. KG CX9020 with firmware version CX9020_CB3011_WEC7_HPS_v602_TC31_B4016.6 allows remote attackers to bypass authentication via the "CE Remote Display Tool" as it does not close the incoming connection on the Windows CE side if the credentials are incorrect. Additional Analyst Notes: - CVE Program Container: References: - https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2019-006.pdf
CVE ID: CVE-2020-20746 State: PUBLISHED Published: 2021-09-30T20:41:27 Last Updated: 2024-08-04T14:22:25.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow in the httpd server on Tenda AC9 V15.03.06.60_EN allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via a crafted POST request to /goform/SetStaticRouteCfg. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/121.html - https://github.com/grapefruitvul/vulinfo/blob/master/tenda/vul1.md
CVE ID: CVE-2020-20781 State: PUBLISHED Published: 2021-09-29T22:06:17 Last Updated: 2024-08-04T14:22:25.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in /ucms/index.php?do=list_edit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, description or content text fields. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/forget-code/ucms/issues/1
CVE ID: CVE-2020-20796 State: PUBLISHED Published: 2021-09-30T21:39:40 Last Updated: 2024-08-04T14:22:25.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlameCMS 3.3.5 contains a SQL injection vulnerability in /master/article.php via the "Id" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FlameNET/FlameCMS/issues/24
CVE ID: CVE-2020-20797 State: PUBLISHED Published: 2021-09-30T21:39:42 Last Updated: 2024-08-04T14:22:25.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FlameNET/FlameCMS/issues/26
CVE ID: CVE-2020-20799 State: PUBLISHED Published: 2021-09-30T21:39:43 Last Updated: 2024-08-04T14:22:25.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: JeeCMS 1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the commentText parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blackjliuyun/cvetest/issues/1
CVE ID: CVE-2020-20800 State: PUBLISHED Published: 2020-09-29T15:29:34 Last Updated: 2024-08-04T14:22:25.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/anx1ang/cve_requests/blob/master/metinfo7.0.0beta_sqli_at_install.md
CVE ID: CVE-2020-20808 State: PUBLISHED Published: 2023-08-03T00:00:00 Last Updated: 2024-10-17T18:40:32.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary code via the eindtijd and starttijd parameters of do/search.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/alorfm/vuln/blob/master/qibosoft_cross_Site_Scripting.md
CVE ID: CVE-2020-20813 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-04T16:22:07.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset packet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.freebuf.com/vuls/215171.html
CVE ID: CVE-2020-20891 State: PUBLISHED Published: 2021-09-20T15:19:20 Last Updated: 2024-08-04T14:22:25.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in function config_input in libavfilter/vf_gblur.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8282 - https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/64a805883d7223c868a683f0030837d859edd2ab
CVE ID: CVE-2020-20892 State: PUBLISHED Published: 2021-09-20T15:19:25 Last Updated: 2024-08-04T14:22:25.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in function filter_frame in libavfilter/vf_lenscorrection.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a division by zero. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8265 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=19587c9332f5be4f6bc6d7b2b8ef3fd21dfeaa01
CVE ID: CVE-2020-20893 State: REJECTED Published: 2021-09-20T15:19:56 Last Updated: 2021-09-27T15:51:04 Description: No description available.
CVE ID: CVE-2020-20894 State: REJECTED Published: 2021-09-20T15:19:57 Last Updated: 2021-09-27T15:51:06 Description: No description available.
CVE ID: CVE-2020-20895 State: REJECTED Published: 2021-09-20T15:19:58 Last Updated: 2021-09-27T15:51:08 Description: No description available.
CVE ID: CVE-2020-20896 State: PUBLISHED Published: 2021-09-20T15:19:58 Last Updated: 2024-08-04T14:22:25.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in function latm_write_packet in libavformat/latmenc.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a Null pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8273 - https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/dd01947397b98e94c3f2a79d5820aaf4594f4d3b
CVE ID: CVE-2020-20897 State: REJECTED Published: 2021-09-20T15:19:59 Last Updated: 2021-09-27T15:51:09 Description: No description available.
CVE ID: CVE-2020-20898 State: PUBLISHED Published: 2021-09-20T15:19:59 Last Updated: 2024-08-04T14:22:25.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer Overflow vulnerability in function filter16_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8263 - https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/99f8d32129dd233d4eb2efa44678a0bc44869f23
CVE ID: CVE-2020-20899 State: REJECTED Published: 2021-09-20T15:19:59 Last Updated: 2021-09-27T15:51:12 Description: No description available.
CVE ID: CVE-2020-20900 State: REJECTED Published: 2021-09-20T15:20:00 Last Updated: 2021-09-27T15:51:13 Description: No description available.
CVE ID: CVE-2020-20901 State: REJECTED Published: 2021-09-20T15:20:00 Last Updated: 2021-09-27T15:51:14 Description: No description available.
CVE ID: CVE-2020-20902 State: PUBLISHED Published: 2021-09-20T15:20:00 Last Updated: 2024-08-04T14:22:25.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CWE-125: Out-of-bounds read vulnerability exists in long_term_filter function in g729postfilter.c in FFmpeg 4.2.1 during computation of the denominator of pseudo-normalized correlation R'(0), that could result in disclosure of information. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8176 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=0c61661a2cbe1b8b284c80ada1c2fdddf4992cad
CVE ID: CVE-2020-20907 State: PUBLISHED Published: 2021-05-24T18:03:26 Last Updated: 2024-08-04T14:22:25.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: MetInfo 7.0 beta is affected by a file modification vulnerability. Attackers can delete and modify ini files in app/system/language/admin/language_general.class.php and app/system/include/function/file.func.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cby234/cve_request/issues/1 - https://cwe.mitre.org/data/definitions/23.html - https://github.com/cby234/cve_request/issues/2
CVE ID: CVE-2020-20908 State: PUBLISHED Published: 2021-10-25T14:37:25 Last Updated: 2024-08-04T14:22:25.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Akaunting v1.3.17 was discovered to contain a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Company Name input field. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/154691/Akaunting-1.3.17-Cross-Site-Scripting.html
CVE ID: CVE-2020-20913 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-14T16:01:47.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basic_title parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ming-soft/MCMS/issues/27
CVE ID: CVE-2020-20914 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-14T16:00:13.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sanluan/PublicCMS/issues/29
CVE ID: CVE-2020-20915 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-14T16:44:07.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sanluan/PublicCMS/issues/29
CVE ID: CVE-2020-20918 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-10T17:37:23.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary php code via the hidden parameter to admin.php when editing a page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pluck-cms/pluck/issues/80
CVE ID: CVE-2020-20919 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-10T17:32:29.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: File upload vulnerability in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary code and access sensitive information via the theme.php file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pluck-cms/pluck/issues/85
CVE ID: CVE-2020-20943 State: PUBLISHED Published: 2021-12-27T20:32:57 Last Updated: 2024-08-04T14:22:25.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in /member/post.php?job=postnew&step=post of Qibosoft v7 allows attackers to force victim users into arbitrarily publishing new articles via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://blog.csdn.net/he_and/article/details/102698171
CVE ID: CVE-2020-20944 State: PUBLISHED Published: 2021-12-27T20:32:58 Last Updated: 2024-08-04T14:22:25.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in /admin/index.php?lfj=mysql&action=del of Qibosoft v7 allows attackers to arbitrarily delete files. Additional Analyst Notes: - CVE Program Container: References: - https://blog.csdn.net/he_and/article/details/102698171 - http://www.qibosoft.com/downloadProduction.htm - https://cwe.mitre.org/data/definitions/23.html
CVE ID: CVE-2020-20945 State: PUBLISHED Published: 2021-12-27T20:32:58 Last Updated: 2024-08-04T14:22:25.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in /admin/index.php?lfj=member&action=editmember of Qibosoft v7 allows attackers to arbitrarily add administrator accounts. Additional Analyst Notes: - CVE Program Container: References: - https://blog.csdn.net/he_and/article/details/102698171 - http://www.qibosoft.com/downloadProduction.htm
CVE ID: CVE-2020-20946 State: PUBLISHED Published: 2021-12-27T20:32:59 Last Updated: 2024-08-04T14:22:25.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qibosoft v7 contains a stored cross-site scripting (XSS) vulnerability in the component /admin/index.php?lfj=friendlink&action=add. Additional Analyst Notes: - CVE Program Container: References: - https://blog.csdn.net/he_and/article/details/102698171 - http://www.qibosoft.com/downloadProduction.htm
CVE ID: CVE-2020-20948 State: PUBLISHED Published: 2021-12-27T20:33:01 Last Updated: 2024-08-04T14:22:25.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhangdaiscott/jeecg/issues/50
CVE ID: CVE-2020-20949 State: PUBLISHED Published: 2021-01-20T15:42:18 Last Updated: 2024-08-04T14:22:25.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in STM32 cryptographic firmware library software expansion for STM32Cube (UM1924). The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the vulnerable library, resulting in remote information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://archiv.infsec.ethz.ch/education/fs08/secsem/bleichenbacher98.pdf - http://st.com - http://x-cube-c
References: - http://archiv.infsec.ethz.ch/education/fs08/secsem/bleichenbacher98.pdf - http://st.com - http://x-cube-cryptolib.com - https://www.st.com/en/embedded-software/x-cube-cryptolib.html - https://bi-zone.medium.com/silence-will-fall-or-how-it-can-take-2-years-to-get-your-vuln-registered-e6134846f5bb
CVE ID: CVE-2020-20950 State: PUBLISHED Published: 2021-01-19T12:22:55 Last Updated: 2024-08-04T14:22:25.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in Microchip Libraries for Applications 2018-11-26 All up to 2018-11-26. The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the vulnerable library, resulting in remote information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://archiv.infsec.ethz.ch/education/fs08/secsem/bleichenbacher98.pdf - http://microchip.com - https://www.microc
s: - http://archiv.infsec.ethz.ch/education/fs08/secsem/bleichenbacher98.pdf - http://microchip.com - https://www.microchip.com/mplab/microchip-libraries-for-applications - https://bi-zone.medium.com/silence-will-fall-or-how-it-can-take-2-years-to-get-your-vuln-registered-e6134846f5bb
CVE ID: CVE-2020-20951 State: PUBLISHED Published: 2021-05-18T15:32:47 Last Updated: 2024-08-04T14:22:25.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Pluck-4.7.10-dev2 admin background, a remote command execution vulnerability exists when uploading files. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/434.html - https://github.com/pluck-cms/pluck/issues/84
CVE ID: CVE-2020-20969 State: PUBLISHED Published: 2023-06-20T00:00:00.000Z Last Updated: 2025-04-16T14:21:28.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcan_restoreitem.php file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pluck-cms/pluck/issues/86 - https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2020-20969.md
CVE ID: CVE-2020-20971 State: PUBLISHED Published: 2022-06-01T14:31:58 Last Updated: 2024-08-04T14:22:25.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in PbootCMS v2.0.3 via /admin.php?p=/User/index. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TplusSs/PbootCMS/issues/1
CVE ID: CVE-2020-20975 State: PUBLISHED Published: 2021-08-12T14:49:18 Last Updated: 2024-08-04T14:22:25.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: In \lib\admin\action\dataaction.class.php in Gxlcms v1.1, SQL Injection exists via the $filename parameter. Additional Analyst Notes: - CVE Program Container: References: - https://blog.csdn.net/qq_41770175/article/details/93486383
CVE ID: CVE-2020-20977 State: PUBLISHED Published: 2021-08-12T14:49:19 Last Updated: 2024-08-04T14:22:25.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in index.php/legend/6.html of UK CMS v1.1.10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Comments section. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yxcmf/ukcms/issues/6
CVE ID: CVE-2020-20979 State: PUBLISHED Published: 2021-08-12T14:49:20 Last Updated: 2024-08-04T14:22:25.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the move_uploaded_file() function of LJCMS v4.3 allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/0xyu/PHP_Learning/issues/2