rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-17534 
There exists a race condition between the deletion of the temporary file and the creation of the temporary directory in `webkit` subproject of HTML/Java API version 1.7. A similar vulnerability has recently been disclosed in other Java projects and the fix in HTML/Java API version 1.7.1 follows theirs: To avoid local privilege escalation version 1.7.1 creates the temporary directory atomically without dealing with the temporary file: https://github.com/apache/netbeans-html4j/commit/fa70e507e5555e1adb4f6518479fc408a7abd0e6
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache NetBeans HTML/Java API
Published: 2021-01-11T15:33:28.000Z
CVE-2020-17538 
A buffer overflow vulnerability in GetNumSameData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:10:10.000Z
CVE-2020-17541 
Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial of service of the target service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-01T14:44:41.000Z
CVE-2020-17542 
Cross Site Scripting (XSS) in dotCMS v5.1.5 allows remote attackers to execute arbitrary code by injecting a malicious payload into the "Task Detail" comment window of the "/dotAdmin/#/c/workflow" component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-23T20:23:48.000Z
CVE-2020-17551 
ImpressCMS 1.4.0 is affected by XSS in modules/system/admin.php which may result in arbitrary remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-07T16:05:28.000Z
CVE-2020-17563 
Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to " /index.php?s=/admin-tpl-del&id=".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-22T21:20:56.000Z
CVE-2020-17564 
Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to the " Admin/DataAction.class.php" component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-22T21:21:05.000Z
CVE-2020-17752 
Integer overflow vulnerability in payable function of a smart contract implementation for an Ethereum token, as demonstrated by the smart contract implemented at address 0xB49E984A83d7A638E7F2889fc8328952BA951AbE, an implementation for MillionCoin (MON).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-24T19:16:56.000Z
CVE-2020-17753 
An issue was discovered in function addMeByRC in the smart contract implementation for RC, an Ethereum token, allows attackers to transfer an arbitrary amount of tokens to an arbitrary address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-24T19:16:31.000Z
CVE-2020-17759 
An issue was found in the Evernote client for Windows 10, 7, and 2008 in the protocol handler. This enables attackers for arbitrary command execution if the user clicks on a specially crafted URL. AKA: WINNOTE-19941.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-24T19:16:12.000Z
CVE-2020-17891 
TP-Link Archer C1200 firmware version 1.13 Build 2018/01/24 rel.52299 EU has a XSS vulnerability allowing a remote attacker to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-14T19:25:42.000Z
CVE-2020-17901 
Cross-site request forgery (CSRF) in PbootCMS 1.3.2 allows attackers to change the password of a user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-30T18:22:24.000Z
CVE-2020-17952 
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-26T19:48:20.000Z
CVE-2020-17999 
Cross Site Scripting (XSS) in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-28T15:23:20.000Z
CVE-2020-18013 
SQL Injextion vulnerability exists in Whatsns 4.0 via the ip parameter in index.php?admin_banned/add.htm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-27T15:02:53.000Z
CVE-2020-18019 
SQL Injection in Xinhu OA System v1.8.3 allows remote attackers to obtain sensitive information by injecting arbitrary commands into the "typeid" variable of the "createfolderAjax" function in the "mode_worcAction.php" component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-28T13:23:00.000Z
CVE-2020-18020 
SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the "user_phone" parameter of a crafted HTTP request to the "admin.php" component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-28T13:22:47.000Z
CVE-2020-18022 
Cross Site Scripting (XSS) in Qibosoft QiboCMS v7 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information by injecting arbitrary commands in a HTTP request to the "ewebeditor\3.1.1\kindeditor.js" component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-28T15:18:42.000Z
CVE-2020-18032 
Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-29T17:20:02.000Z
CVE-2020-18035 
Cross Site Scripting (XSS) in Jeesns v1.4.2 allows remote attackers to execute arbitrary code by injecting commands into the "CKEditorFuncNum" parameter in the component "CkeditorUploadController.java".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-29T22:53:25.000Z
CVE-2020-18048 
An issue in craigms/main.php of CraigMS 1.0 allows attackers to execute arbitrary commands via a crafted input entered into the DB Name field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-02T17:46:59.000Z
CVE-2020-18065 
Cross Site Scripting (XSS) vulnerability exists in PopojiCMS 2.0.1 in admin.php?mod=menumanager--------- edit menu.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-25T19:17:46.000Z
CVE-2020-18066 
Cross Site Scripting vulnerability in ZrLog 2.1.0 via the (1) userName and (2) email parameters in post/addComment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-29T17:47:31.000Z
CVE-2020-18070 
Path Traversal in iCMS v7.0.13 allows remote attackers to delete folders by injecting commands into a crafted HTTP request to the "do_del()" method of the component "database.admincp.php".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-29T23:28:58.000Z
CVE-2020-18077 
A buffer overflow vulnerability in the Virtual Path Mapping component of FTPShell v6.83 allows attackers to cause a denial of service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-17T16:13:57.000Z
CVE-2020-18078 
A vulnerability in /include/web_check.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-17T16:13:58.000Z
CVE-2020-18081 
The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the password in plaintext through a SQL query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-17T16:15:44.000Z
CVE-2020-18084 
Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to the component "/member/index/login.html" when logging in.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-30T20:37:38.000Z
CVE-2020-18102 
Cross Site Scripting (XSS) in Hotels_Server v1.0 allows remote attackers to execute arbitrary code by injecting crafted commands the data fields in the component "/controller/publishHotel.php".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-10T19:18:24.000Z
CVE-2020-18106 
The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-27T19:10:31.000Z
CVE-2020-18114 
An arbitrary file upload vulnerability in the /uploads/dede component of DedeCMS V5.7SP2 allows attackers to upload a webshell in HTM format.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-27T20:30:10.000Z
CVE-2020-18116 
A lack of filtering for searched keywords in the search bar of YouDianCMS 8.0 allows attackers to perform SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-27T20:30:12.000Z
CVE-2020-18121 
A configuration issue in Indexhibit 2.1.5 allows authenticated attackers to modify .php files, leading to getshell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-30T16:04:44.000Z
CVE-2020-18123 
A cross-site request forgery (CSRF) vulnerability in Indexhibit 2.1.5 allows attackers to arbitrarily delete admin accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-30T16:04:42.000Z
CVE-2020-18124 
A cross-site request forgery (CSRF) vulnerability in Indexhibit 2.1.5 allows attackers to arbitrarily reset account passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-30T16:04:43.000Z
CVE-2020-18125 
A reflected cross-site scripting (XSS) vulnerability in the /plugin/ajax.php component of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-30T16:04:47.000Z
CVE-2020-18126 
Multiple stored cross-site scripting (XSS) vulnerabilities in the Sections module of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-30T16:04:40.000Z
CVE-2020-18127 
An issue in the /config/config.php component of Indexhibit 2.1.5 allows attackers to arbitrarily view files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-30T16:04:39.000Z
CVE-2020-18129 
A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-22T20:27:59.000Z
CVE-2020-18131 
Cross Site Request Forgery (CSRF) vulnerability in Bluethrust Clan Scripts v4 allows attackers to escilate privledges to an arbitrary account via a crafted request to /members/console.php?cID=5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-05-08T00:00:00.000Z
CVE-2020-18132 
Cross Site Scripting (XSS) vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category name field to categoryEdit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-05-08T00:00:00.000Z
CVE-2020-18144 
SQL Injection Vulnerability in ECTouch v2 via the integral_min parameter in index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-14T16:55:26.000Z
CVE-2020-18145 
Cross Site Scripting (XSS) vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-14T17:02:08.000Z
CVE-2020-18151 
Cross Site Request Forgery (CSRF) vulnerability in ThinkCMF v5.1.0, which can add an admin account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-14T18:18:38.000Z
CVE-2020-18155 
SQL Injection vulnerability in Subrion CMS v4.2.1 in the search page if a website uses a PDO connection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-14T19:06:11.000Z
CVE-2020-18157 
Cross Site Request Forgery (CSRF) vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-29T16:17:27.000Z
CVE-2020-18158 
Cross Site Scripting (XSS) vulnerability in HuCart 5.7.4 via nickname in index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-29T16:26:38.000Z
CVE-2020-18164 
SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-17T19:16:13.000Z
CVE-2020-18165 
Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Website SEO Keywords" field on the page "admin/info.php?shuyu".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-12T17:34:25.000Z
CVE-2020-18166 
Unrestricted File Upload in LAOBANCMS v2.0 allows remote attackers to upload arbitrary files by attaching a file with a ".jpg.php" extension to the component "admin/wenjian.php?wj=../templets/pc".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-14T13:09:44.000Z
CVE-2020-18167 
Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Homepage Introduction" field of component "admin/info.php?shuyu".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-14T13:14:28.000Z
CVE-2020-18169 
A vulnerability in the Windows installer XML (WiX) toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. NOTE: Exploit of the Snagit installer would require the end user to ignore other safety mechanisms provided by the Host OS. See reference document for more details
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-26T18:26:17.000Z
CVE-2020-18170 
An issue in the SeChangeNotifyPrivilege component of Abloy Key Manager Version 7.14301.0.0 allows attackers to escalate privileges via a change in permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-26T18:26:18.000Z
CVE-2020-18171 
TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding (OLE) which can allow attackers to obfuscate and embed crafted files used to escalate privileges. NOTE: This implies that Snagit's use of OLE is a security vulnerability unto itself and it is not. See reference document for more details
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-26T18:26:19.000Z
CVE-2020-18172 
A code injection vulnerability in the SeDebugPrivilege component of Trezor Bridge 2.0.27 allows attackers to escalate privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-26T18:26:21.000Z
CVE-2020-18173 
A DLL injection vulnerability in 1password.dll of 1Password 7.3.712 allows attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-26T18:26:22.000Z
CVE-2020-18174 
A process injection vulnerability in setup.exe of AutoHotkey 1.1.32.00 allows attackers to escalate privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-26T18:26:23.000Z
CVE-2020-18175 
SQL Injection vulnerability in Metinfo 6.1.3 via a dosafety_emailadd action in basic.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-29T16:55:54.000Z
CVE-2020-18178 
Path Traversal in HongCMS v4.0.0 allows remote attackers to view, edit, and delete arbitrary files via a crafted POST request to the component "/hcms/admin/index.php/language/ajax."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-18T18:03:38.000Z
CVE-2020-18184 
In PluxXml V5.7,the theme edit function /PluXml/core/admin/parametres_edittpl.php allows remote attackers to execute arbitrary PHP code by placing this code into a template.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-02T12:46:21.000Z
CVE-2020-18185 
class.plx.admin.php in PluXml 5.7 allows attackers to execute arbitrary PHP code by modify the configuration file in a linux environment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-02T12:50:32.000Z
CVE-2020-18190 
Bludit v3.8.1 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /admin/ajax/upload-profile-picture.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-02T13:12:51.000Z
CVE-2020-18191 
GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-02T13:19:53.000Z
CVE-2020-18194 
Cross Site Scripting (XSS) in emlog v6.0.0 allows remote attackers to execute arbitrary code by adding a crafted script as a link to a new blog post.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T21:01:53.000Z
CVE-2020-18195 
Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete a specific article via the component " /admin.php?action=page."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T21:01:54.000Z
CVE-2020-18198 
Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete specific images via the component " /admin.php?action=images."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T21:01:55.000Z
CVE-2020-18215 
Multiple SQL Injection vulnerabilities in PHPSHE 1.7 in phpshe/admin.php via the (1) ad_id, (2) menu_id, and (3) cashout_id parameters, which could let a remote malicious user execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-09T18:56:32.000Z
CVE-2020-18220 
Weak Encoding for Password in DoraCMS v2.1.1 and earlier allows attackers to obtain sensitive information as it does not use a random salt or IV for its AES-CBC encryption, causes password encrypted for users to be susceptible to dictionary attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-20T19:55:48.000Z
CVE-2020-18221 
Cross Site Scripting (XSS) in Typora v0.9.65 and earlier allows remote attackers to execute arbitrary code by injecting commands during block rendering of a mathematical formula.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-26T14:50:52.000Z
CVE-2020-18229 
Cross Site Scripting (XSS) in PHPMyWind v5.5 allows remote attackers to execute arbitrary code by injecting scripts into the parameter "$cfg_copyright" of component " /admin/web_config.php".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-27T15:20:24.000Z
CVE-2020-18230 
Cross Site Scripting (XSS) in PHPMyWind v5.5 allows remote attackers to execute arbitrary code by injecting scripts into the parameter "$cfg_switchshow" of component " /admin/web_config.php".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-27T15:20:15.000Z
CVE-2020-18232 
Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-18243 
SQL injection vulnerability found in Enricozab CMS v.1.0 allows a remote attacker to execute arbitrary code via /hdo/hdo-view-case.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-04-15T00:00:00.000Z
CVE-2020-18259 
ED01-CMS v1.0 was discovered to contain a reflective cross-site scripting (XSS) vulnerability in the component sposts.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Post title or Post content fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-03T17:57:34.000Z
CVE-2020-18261 
An arbitrary file upload vulnerability in the image upload function of ED01-CMS v1.0 allows attackers to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-03T17:57:35.000Z
CVE-2020-18262 
ED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-03T17:57:35.000Z
CVE-2020-18263 
PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search parameter. This vulnerability allows attackers to access sensitive database information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-03T17:57:36.000Z
CVE-2020-18264 
Cross Site Request Forgery (CSRF) in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=act_edit_member".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-07T18:24:14.000Z
CVE-2020-18265 
Cross Site Request Forgery (CSRF) in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=act_add_member".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-07T18:24:15.000Z
CVE-2020-18268 
Open Redirect in Z-BlogPHP v1.5.2 and earlier allows remote attackers to obtain sensitive information via the "redirect" parameter in the component "zb_system/cmd.php."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-07T18:24:17.000Z
CVE-2020-18280 
Cross Site Scripting vulnerability found in Phodal CMD v.1.0 allows a local attacker to execute arbitrary code via the EMBED SRC function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-05-09T00:00:00.000Z
CVE-2020-18282 
Cross-site scripting (XSS) vulnerability in NoneCms 1.3.0 allows remote attackers to inject arbitrary web script or HTML via feedback feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-05-08T00:00:00.000Z