RSS   Podatności dla 'Nucleus cms'   RSS

2018-12-10
 
CVE-2018-16636

CWE-79
 
 
Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter.

 
2015-07-08
 
CVE-2015-5454

CWE-79
 
 
Cross-site scripting (XSS) vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML via the title parameter when adding a new item.

 
2011-09-23
 
CVE-2011-3760

CWE-200
 
 
Nucleus 3.61 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xmlrpc/api_nucleus.inc.php and certain other files.

 

Copyright 2024, cxsecurity.com

 

Back to Top