CVE-2014-9557

Multiple cross-site scripting (XSS) vulnerabilities in SmartCMS v.2.

• CWE-79

• http://packetstormsecurity.com/files/130076/SmartCMS-2-Cross-Site-Scripting.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2015/Jan/97Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/130076/SmartCMS-2-Cross-Site-Scripting.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2015/Jan/97Mailing List, Third Party Advisory

Published

Aug 28, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-9526Multiple cross-site scripting (XSS) vulnerabilities in concr…
• CVE-2014-9527HSLFSlideShow in Apache POI before 3.11 allows remote attack…
• CVE-2014-9528SQL injection vulnerability in the actionIndex function in p…
• CVE-2014-9529Race condition in the key_gc_unused_keys function in securit…
• CVE-2014-9530A vulnerability exists in nw.js before 0.11.3 when calling n…9.8
• CVE-2014-9556Integer overflow in the qtmd_decompress function in libmspac…
• CVE-2014-9558Multiple SQL injection vulnerabilities in SmartCMS v.2.
• CVE-2014-9559Cross-site scripting (XSS) vulnerability in SnipSnap 0.5.2a,…
• CVE-2014-9560SQL injection vulnerability in redir_last_post_list.php in S…
• CVE-2014-9561Cross-site scripting (XSS) vulnerability in redir_last_post_…
• CVE-2014-9562Cross-site scripting (XSS) vulnerability in display_dialog.p…
• CVE-2014-9563CRLF injection vulnerability in the web-based management (WB…4.9