Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-23369PUBLISHED: 2021-05-10In YzmCMS 5.6, XSS was discovered in member/member_content/init.html via the SRC attribute of an IFRAME element because of using UEditor 1.4.3.3.
CVE-2020-23370PUBLISHED: 2021-05-10In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, which allows remote attackers to upload a swf file. The swf file can be injected with arbitrary web script or HTML.
CVE-2020-23371PUBLISHED: 2021-05-10Cross-site scripting (XSS) vulnerability in static/admin/js/kindeditor/plugins/multiimage/images/swfupload.swf in noneCms v1.3.0 allows remote attackers to inject arbitrary web script or HTML via the movieName parameter.
CVE-2020-23373PUBLISHED: 2021-05-10Cross-site scripting (XSS) vulnerability in admin/nav/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the name parameter.
CVE-2020-23374PUBLISHED: 2021-05-10Cross-site scripting (XSS) vulnerability in admin/article/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the name parameter.
0 Comments
Tweet This
User Rank: Apprentice
3/18/2017 | 9:56:36 AM
An in-depth discussion (very well worth the read fro anyone interested in cyber-security) of the issues with Consumer Reports entry into ratings is availablwe for free at the Ceritude Digital webste. From their main page on that site, go to the footer links at the bottom of the page and select the link labeled "Blog (from our CTO)". Library". Near the top of the blog is an article entitled "Should Consumer Reports Set Cybersecurity Standards?"
Alternatively, you can go to F. Scott Deaver's LinkedIn page and look for the "Should Consumer Reports Set Cybersecurity Standards?" topic among his other articles.