CVE-2019-11398

Multiple cross-site scripting (XSS) vulnerabilities in UliCMS 2019.2 and 2019.1 allow remote attackers to inject arbitrary web script or HTML via the go parameter to admin/index.php, the go parameter to /admin/index.php?register=register, or the error parameter to admin/index.php?action=favicon.

• CWE-79

• http://packetstormsecurity.com/files/153219/UliCMS-2019.1-Cross-Site-Scripting.html
• https://en.ulicms.de/Vendor Advisory
• https://www.exploit-db.com/exploits/46741/Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/153219/UliCMS-2019.1-Cross-Site-Scripting.html
• https://en.ulicms.de/Vendor Advisory
• https://www.exploit-db.com/exploits/46741/Exploit, Third Party Advisory, VDB Entry

Published

May 8, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-11391An issue was discovered in OWASP ModSecurity Core Rule Set (…5.3
• CVE-2019-11392BlogEngine.NET 3.3.7 and earlier allows XXE via an apml file…
• CVE-2019-11393An issue was discovered in /admin/users/update in M/Monit be…
• CVE-2019-11395A buffer overflow in MailCarrier 2.51 allows remote attacker…
• CVE-2019-11396An issue was discovered in Avira Free Security Suite 10. The…
• CVE-2019-11397GetFile.aspx in Rapid4 RapidFlows Enterprise Application Bui…
• CVE-2019-11399An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-65…9.8
• CVE-2019-1140A remote code execution vulnerability exists in the way that…8.8
• CVE-2019-11400An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-65…9.8
• CVE-2019-11401A issue was discovered in SiteServer CMS 6.9.0. It allows re…
• CVE-2019-11402In Gradle Enterprise before 2018.5.3, Build Cache Nodes did …9.8
• CVE-2019-11403In Gradle Enterprise before 2018.5.2, Build Cache Nodes woul…9.8