6 matches found
CVE-2018-1000139
I, Librarian version 4.8 and earlier contains a Cross Site Scripting XSS vulnerability in "id" parameter in stable.php that can result in an attacker using the XSS to send a malicious script to an unsuspecting user...
CVE-2018-1000139
CVE-2018-1000139 affects Scilico I, Librarian prior to version 4.8. The issue is a Cross Site Scripting (XSS) vulnerability in the user-controllable parameter "id" within stable.php, allowing an attacker to inject a malicious script that could be executed in a victim’s browser. The linked Red Hat...
CVE-2017-1000139
Mahara versions 1.8 before 1.8.7, 1.9 before 1.9.5, 1.10 before 1.10.3, and 15.04 before 15.04.0 are vulnerable to server-side request forgery (SSRF) because curl redirects are not consistently checked against a white/black list. Employing SafeCurl will prevent issues.
CVE-2016-1000139
Reflected XSS in wordpress plugin infusionsoft v1.5.11...
CVE-2016-1000139
The WordPress Infusionsoft Gravity Forms Add-on Plugin
CVE-2016-1000139
Reflected XSS in wordpress plugin infusionsoft v1.5.11...