rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-20470 
White Shark System (WSS) 1.3.2 has web site physical path leakage vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-21T04:03:05.000Z
CVE-2020-20471 
White Shark System (WSS) 1.3.2 has an unauthorized access vulnerability in default_user_edit.php, remote attackers can exploit this vulnerability to escalate to admin privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-21T04:04:22.000Z
CVE-2020-20472 
White Shark System (WSS) 1.3.2 has a sensitive information disclosure vulnerability. The if_get_addbook.php file does not have an authentication operation. Remote attackers can obtain username information for all users of the current site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-21T04:05:47.000Z
CVE-2020-20473 
White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the control_task.php, control_project.php, default_user.php files failing to filter the sort parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-21T04:06:47.000Z
CVE-2020-20474 
White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the default_task_edituser.php files failing to filter the csa_to_user parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-21T04:07:37.000Z
CVE-2020-20486 
IEC104 v1.0 contains a stack-buffer overflow in the parameter Iec10x_Sta_Addr.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-31T22:22:31.000Z
CVE-2020-20490 
A heap buffer-overflow in the client_example1.c component of libiec_iccp_mod v1.5 leads to a denial of service (DOS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-31T22:22:32.000Z
CVE-2020-20491 
SQL injection vulnerability in OpenCart v.2.2.00 thru 3.0.3.2 allows a remote attacker to execute arbitrary code via the Fba plugin function in upload/admin/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-20T00:00:00.000Z
CVE-2020-20495 
bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin via the `deleteBackup' parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-31T23:07:24.000Z
CVE-2020-20502 
Cross Site Request Forgery found in yzCMS v.2.0 allows a remote attacker to execute arbitrary code via the token check function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-20T00:00:00.000Z
CVE-2020-20508 
Shopkit v2.7 contains a reflective cross-site scripting (XSS) vulnerability in the /account/register component, which allows attackers to hijack user credentials via a crafted payload in the E-Mail text field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-24T21:27:34.000Z
CVE-2020-20514 
A Cross-Site Request Forgery (CSRF) in Maccms v10 via admin.php/admin/admin/del/ids/<id>.html allows authenticated attackers to delete all users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-24T21:27:38.000Z
CVE-2020-20521 
Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the comment parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z
CVE-2020-20522 
Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the registering user parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z
CVE-2020-20523 
Cross Site Scripting (XSS) vulnerability in adm_user parameter in Gila CMS version 1.11.3, allows remote attackers to execute arbitrary code during the Gila CMS installation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-11T00:00:00.000Z
CVE-2020-20545 
Cross-Site Scripting (XSS) vulnerability in Zhiyuan G6 Government Collaboration System V6.1SP1, via the 'method' parameter to 'seeyon/hrSalary.do'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-30T02:17:51.000Z
CVE-2020-20582 
A server side request forgery (SSRF) vulnerability in /ApiAdminDomainSettings.php of MipCMS 5.0.1 allows attackers to access sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-08T15:44:25.000Z
CVE-2020-20583 
A SQL injection vulnerability in /question.php of LJCMS Version v4.3.R60321 allows attackers to obtain sensitive database information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-08T15:44:28.000Z
CVE-2020-20584 
A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML via the form parameter post to /public/console/profile/info-submit/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-08T15:44:29.000Z
CVE-2020-20585 
A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to access sensitive database information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-08T15:44:30.000Z
CVE-2020-20586 
A cross site request forgery (CSRF) vulnerability in the /xyhai.php?s=/Auth/editUser URI of XYHCMS V3.6 allows attackers to edit any information of the administrator such as the name, e-mail, and password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-08T15:44:32.000Z
CVE-2020-20588 
File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5 allows remote attackers to run arbitrary code via avatar upload to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-15T00:00:00.000Z
CVE-2020-20589 
Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-15T00:00:00.000Z
CVE-2020-20593 
A cross-site request forgery (CSRF) in Rockoa v1.9.8 allows an authenticated attacker to arbitrarily add an administrator account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T22:35:20.000Z
CVE-2020-20595 
A cross-site request forgery (CSRF) in OPMS v1.3 and below allows attackers to arbitrarily add a user account via /user/add.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T22:39:44.000Z
CVE-2020-20597 
A cross-site scripting (XSS) vulnerability in the potrtalItemName parameter in \web\PortalController.java of lemon V1.10.0 allows attackers to execute arbitrary web scripts or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T22:40:17.000Z
CVE-2020-20598 
A cross-site scripting (XSS) vulnerability in the Editing component of lemon V1.10.0 allows attackers to execute arbitrary web scripts or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T22:40:43.000Z
CVE-2020-20600 
MetInfo 7.0 beta contains a stored cross-site scripting (XSS) vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T22:41:06.000Z
CVE-2020-20601 
An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T22:43:08.000Z
CVE-2020-20605 
Blog CMS v1.0 contains a cross-site scripting (XSS) vulnerability in the /controller/CommentAdminController.java component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T22:43:32.000Z
CVE-2020-20625 
Sliced Invoices plugin for WordPress 3.8.2 and earlier allows unauthenticated information disclosure and authenticated SQL injection via core/class-sliced.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-31T15:52:52.000Z
CVE-2020-20626 
lara-google-analytics.php in Lara Google Analytics plugin through 2.0.4 for WordPress allows authenticated stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-31T15:56:45.000Z
CVE-2020-20627 
The includes/gateways/stripe/includes/admin/admin-actions.php in GiveWP plugin through 2.5.9 for WordPress allows unauthenticated settings change.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-31T16:00:05.000Z
CVE-2020-20628 
controller/controller-comments.php in WP GDPR plugin through 2.1.1 has unauthenticated stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-31T16:07:05.000Z
CVE-2020-20633 
ajax_policy_generator in admin/modules/cli-policy-generator/classes/class-policy-generator-ajax.php in GDPR Cookie Consent (cookie-law-info) 1.8.2 and below plugin for WordPress, allows authenticated stored XSS and privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-21T15:42:06.000Z
CVE-2020-20634 
Elementor 2.9.5 and below WordPress plugin allows authenticated users to activate its safe mode feature. This can be exploited to disable all security plugins on the blog.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-21T14:52:22.000Z
CVE-2020-20636 
SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via the id parameter of the goodbad() function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-20T00:00:00.000Z
CVE-2020-20640 
Cross Site Scripting (XSS) vulnerability in ECShop 4.0 due to security filtering issues, in the user.php file, we can use the html entity encoding to bypass the security policy of the safety.php file, triggering the xss vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-28T17:29:08.000Z
CVE-2020-20642 
Cross Site Request Forgery (CSRF) vulnerability exists in EyouCMS 1.3.6 that can add an htm page to execute the js code via login.php?m=admin&c=Filemanager&a=newfile&lang=cn.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-19T18:01:33.000Z
CVE-2020-20645 
Cross Site Scripting (XSS) vulnerability exists in EyouCMS1.3.6 in the basic_information area.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-19T18:16:26.000Z
CVE-2020-20657 
Buffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5, allows attackers to cause a denial of service via an unexpected packet while trying to connect.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-02T17:45:01.000Z
CVE-2020-20658 
Buffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5, allows attackers to cause a denail of service when trying to calloc an unexpectiedly large space.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-02T17:45:02.000Z
CVE-2020-20662 
libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_example1.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-30T16:40:49.000Z
CVE-2020-20663 
libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_connection.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-30T16:40:51.000Z
CVE-2020-20664 
libiec_iccp_mod v1.5 contains a segmentation violation in the component server_example1.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-30T16:40:52.000Z
CVE-2020-20665 
rudp v0.6 was discovered to contain a memory leak in the component main.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-30T16:40:54.000Z
CVE-2020-20670 
An arbitrary file upload vulnerability in /admin/media/upload of ZKEACMS V3.2.0 allows attackers to execute arbitrary code via a crafted HTML file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-13T21:13:08.000Z
CVE-2020-20671 
A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-13T21:13:09.000Z
CVE-2020-20672 
An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-13T21:13:10.000Z
CVE-2020-20675 
Nuishop v2.3 contains a SQL injection vulnerability in /goods/getGoodsListByConditions/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-26T21:11:44.000Z
CVE-2020-20691 
An issue in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via bypassing the file extension filter and uploading crafted HTML files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-27T21:34:17.000Z
CVE-2020-20692 
GilaCMS v1.11.4 was discovered to contain a SQL injection vulnerability via the $_GET parameter in /src/core/controllers/cm.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-27T21:34:17.000Z
CVE-2020-20693 
A Cross-Site Request Forgery (CSRF) in GilaCMS v1.11.4 allows authenticated attackers to arbitrarily add administrator accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-27T21:34:28.000Z
CVE-2020-20695 
A stored cross-site scripting (XSS) vulnerability in GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-27T21:34:19.000Z
CVE-2020-20696 
A cross-site scripting (XSS) vulnerability in /admin/content/post of GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Tags field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-27T21:34:19.000Z
CVE-2020-20697 
Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows a remote attacker to execute arbitrary code and gain access to senstivie information via a crafted script to the address parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-20T00:00:00.000Z
CVE-2020-20698 
A remote code execution (RCE) vulnerability in /1.com.php of S-CMS PHP v3.0 allows attackers to getshell via modification of a PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-27T22:19:25.000Z
CVE-2020-20699 
A cross site scripting (XSS) vulnerability in S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Copyright text box under Basic Settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-27T22:19:29.000Z
CVE-2020-20700 
A stored cross site scripting (XSS) vulnerability in /app/form_add/of S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Title Entry text box.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-27T22:19:30.000Z
CVE-2020-20701 
A stored cross site scripting (XSS) vulnerability in /app/config/of S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-27T22:19:31.000Z
CVE-2020-20703 
Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-20T00:00:00.000Z
CVE-2020-20718 
File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to the the save_file() parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-20T00:00:00.000Z
CVE-2020-20725 
Cross Site Scripting vulnerability in taogogo taoCMS v.2.5 beta5.1 allows remote attacker to execute arbitrary code via the name field in admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-20T00:00:00.000Z
CVE-2020-20726 
Cross Site Request Forgery vulnerability in Gila GilaCMS v.1.11.4 allows a remote attacker to execute arbitrary code via the cm/update_rows/user parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-20T00:00:00.000Z
CVE-2020-20735 
File Upload vulnerability in LJCMS v.4.3.R60321 allows a remote attacker to execute arbitrary code via the ljcms/index.php parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-20T00:00:00.000Z
CVE-2020-20739 
im_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the leakage of remote server path or stack address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-20T18:16:00.000Z
CVE-2020-20740 
PDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in pdf_get_version().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-20T18:16:03.000Z
CVE-2020-20741 
Incorrect Access Control in Beckhoff Automation GmbH & Co. KG CX9020 with firmware version CX9020_CB3011_WEC7_HPS_v602_TC31_B4016.6 allows remote attackers to bypass authentication via the "CE Remote Display Tool" as it does not close the incoming connection on the Windows CE side if the credentials are incorrect.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-23T19:25:46.000Z
CVE-2020-20746 
A stack-based buffer overflow in the httpd server on Tenda AC9 V15.03.06.60_EN allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via a crafted POST request to /goform/SetStaticRouteCfg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-30T20:41:27.000Z
CVE-2020-20781 
A stored cross-site scripting (XSS) vulnerability in /ucms/index.php?do=list_edit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, description or content text fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-29T22:06:17.000Z
CVE-2020-20796 
FlameCMS 3.3.5 contains a SQL injection vulnerability in /master/article.php via the "Id" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-30T21:39:40.000Z
CVE-2020-20797 
FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-30T21:39:42.000Z
CVE-2020-20799 
JeeCMS 1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the commentText parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-30T21:39:43.000Z
CVE-2020-20800 
An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-29T15:29:34.000Z
CVE-2020-20808 
Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary code via the eindtijd and starttijd parameters of do/search.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-03T00:00:00.000Z
CVE-2020-20813 
Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-20891 
Buffer Overflow vulnerability in function config_input in libavfilter/vf_gblur.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:19:20.000Z
CVE-2020-20892 
An issue was discovered in function filter_frame in libavfilter/vf_lenscorrection.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a division by zero.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:19:25.000Z
CVE-2020-20896 
An issue was discovered in function latm_write_packet in libavformat/latmenc.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a Null pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:19:58.000Z
CVE-2020-20898 
Integer Overflow vulnerability in function filter16_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:19:59.000Z
CVE-2020-20902 
A CWE-125: Out-of-bounds read vulnerability exists in long_term_filter function in g729postfilter.c in FFmpeg 4.2.1 during computation of the denominator of pseudo-normalized correlation R'(0), that could result in disclosure of information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:20:00.000Z
CVE-2020-20907 
MetInfo 7.0 beta is affected by a file modification vulnerability. Attackers can delete and modify ini files in app/system/language/admin/language_general.class.php and app/system/include/function/file.func.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-24T18:03:26.000Z
CVE-2020-20908 
Akaunting v1.3.17 was discovered to contain a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Company Name input field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-25T14:37:25.000Z
CVE-2020-20913 
SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basic_title parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z
CVE-2020-20914 
SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z