CVE-2020-18084

Cross Site Scripting XSS in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to the component "/member/index/login.html" when logging in...

CVE-2020-18084

CVE-2020-18084 affects yzmCMS v5.2 and enables a Cross-Site Scripting (XSS) vulnerability in the login flow. An attacker can inject commands into the referer field of a POST to the component path “/member/index/login.html” during login, potentially leading to arbitrary code execution on the victi...

CVE-2018-18084

CVE-2018-18084 affects DuomiCMS 3.0. A SQL injection exists in the ajax.php file, demonstrated by the uid parameter. The issue is rated with CVSS v3.1: base score 9.8 (CRITICAL), vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network attack needs no authentication or user interac...

Atlassian Confluence < 6.3.4 usermacros Reflected XSS (CVE-2017-18084)

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 6.3.4. It is, therefore, affected by a reflected cross-site scripting vulnerability in the usermacros resource. Note that Nessus has not tested for this issue but has instead...

CVE-2017-18084

CVE-2017-18084 affects Atlassian Confluence Server

XSS in the usermacros resource through the description of a macro - CVE-2017-18084

The usermacros resource in Atlassian Confluence Server before version 6.3.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the description of a macro. Acknowledgements Atlassian would like to credit Veit Hailperin @fenceposterro...

XSS in the usermacros resource through the description of a macro - CVE-2017-18084

The usermacros resource in Atlassian Confluence Server before version 6.3.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the description of a macro. Acknowledgements Atlassian would like to credit Veit Hailperin @fenceposterro...

jQuery Suspicious URL Redirection (CVE-2018-18084)

A suspicious URL redirection to a possibly malicious jQuery domain has been encountered. By injecting JavaScript code, an attacker may redirect the user to an attacker-controlled website...