CVE-2023-44763
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-44763
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Concrete CMS v9.2.1 is affected by an Arbitrary File Upload vulnerability via a Thumbnail file upload, which allows Cross-Site Scripting (XSS). NOTE: the vendor's position is that a customer is supposed to know that "pdf" should be excluded from the allowed file types, even though pdf is one of the allowed file types in the default configuration.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
PortlandLabs Concrete CMS 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PortlandLabs Concrete CMS是美国PortlandLabs公司的一个面向团队的开源内容管理系统。 PortlandLabs Concrete CMS v9.2.1版本存在代码问题漏洞，该漏洞源于存在任意文件上传漏洞，允许跨站脚本(XSS)攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2023-44763
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | ConcreteCMS v.9.2.1 is affected by Arbitrary File Upload vulnerability that allows Cross-Site Scriting (XSS) Stored. | https://github.com/sromanhu/CVE-2023-44763_ConcreteCMS-Arbitrary-file-upload-Thumbnail | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-44763
请登录查看更多情报信息。
Same Patch Batch · n/a · 2023-10-10 · 23 CVEs total
| CVE-2020-27635 | Multiple Embedded TCP/IP 安全特征问题漏洞 | |
| CVE-2023-36126 | PHPJabbers Appointment Scheduler 跨站脚本漏洞 | |
| CVE-2023-36127 | PHPJabbers Appointment Scheduler 安全漏洞 | |
| CVE-2023-45312 | Ericsson Erlang 安全漏洞 | |
| CVE-2023-31096 | Broadcom LSI PCI-SV92EX Soft Modem Kernel Driver 缓冲区错误漏洞 | |
| CVE-2023-43896 | Macrium Reflect 安全漏洞 | |
| CVE-2020-27213 | Multiple Embedded TCP/IP 安全特征问题漏洞 | |
| CVE-2020-27630 | Multiple Embedded TCP/IP 安全特征问题漏洞 | |
| CVE-2020-27631 | Oryx Embedded CycloneTCP ISN 安全特征问题漏洞 | |
| CVE-2020-27633 | FNET software 安全特征问题漏洞 | |
| CVE-2020-27634 | Contiki 安全特征问题漏洞 | |
| CVE-2023-44959 | D-Link DSL-3782 命令注入漏洞 | |
| CVE-2020-27636 | Microchip MPLAB Net 安全特征问题漏洞 | |
| CVE-2023-44487 | Apache HTTP/2 资源管理错误漏洞 | |
| CVE-2023-45208 | D-Link DAP-X1860 命令注入漏洞 | |
| CVE-2023-44846 | SeaCMS 安全漏洞 | |
| CVE-2023-44847 | SeaCMS 安全漏洞 | |
| CVE-2023-44848 | SeaCMS 安全漏洞 | |
| CVE-2020-18336 | Typora 跨站脚本漏洞 | |
| CVE-2023-42189 | Matter 安全漏洞 |
Showing top 20 of 23 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2023-44763
No comments yet