Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2023-53927

PHPJabbers Simple CMS 5.0 Stored Cross-Site Scripting via Section Creation

PHPJabbers Simple CMS 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through section name parameters. Attackers can create sections with embedded JavaScript payloads that will execute when administrators view the sections, potentially enabling client-side code execution.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Phpjabbers Simple-cms Project
Products
Simple Cms Simple Cms
CVE-2023-53926

PHPJabbers Simple CMS 5.0 SQL Injection via Column Parameter

PHPJabbers Simple CMS 5.0 contains a SQL injection vulnerability in the 'column' parameter that allows remote attackers to manipulate database queries. Attackers can inject crafted SQL payloads through the 'column' parameter in the index.php endpoint to potentially extract or modify database information.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Phpjabbers Simple-cms Project
Products
Simple Cms Simple Cms