8 matches found
CVE-2020-18413
Stored cross site scripting XSS vulnerability in /index.php?admin-master-navmenu-add of Chaoji CMS v2.18 that allows attackers to execute arbitrary code...
CVE-2017-18413
In cPanel before 67.9999.103, the backup system overwrites root's home directory when a mount disappears SEC-299...
CVE-2019-18413
creationtimestamp| type| source ---|---|--- 2024-01-27 12:46:10+00:00| seen| https://t.me/ctinow/174749...
CVE-2020-18413
Stored cross site scripting XSS vulnerability in /index.php?admin-master-navmenu-add of Chaoji CMS v2.18 that allows attackers to execute arbitrary code...
CVE-2020-18413
CVE-2020-18413 is a stored XSS vulnerability in Chaoji CMS v2.18 affecting the endpoint /index.php?admin-master-navmenu-add . Exploitation from this flaw could allow an attacker to execute arbitrary code within the context of the affected CMS. Multiple sources corroborate the issue and describe t...
6ix (=0.0.0-canary.0), 9ight (>=0.0.0-canary.0 <=0.0.0-canary.6) +2903 more potentially affected by CVE-2019-18413 via class-validator (>=0.10.0 <=0.13.2)
class-validator NPM version =0.10.0, =0.0.0-canary.0, =0.0.1, =1.0.4, =4.2.3, =2.7.0, =1.1.0, =1.1.0, =1.0.0, =0.0.1, =0.1.0, =0.0.2, =0.0.1, =0.0.13 and more Source cves: CVE-2019-18413 Source advisory: OSV:GHSA-FJ58-H2FR-3PP2...
CVE-2019-18413
In TypeStack class-validator 0.10.2, validate input validation can be bypassed because certain internal attributes can be overwritten via a conflicting name. Even though there is an optional forbidUnknownValues parameter that can be used to reduce the risk of this bypass, this option is not...
CVE-2019-18413
CVE-2019-18413 affects TypeStack class-validator 0.10.2, where validate() input validation can be bypassed because internal attributes can be overwritten with a conflicting name. This bypass enables attackers to inject malicious input potentially leading to SQL Injection or XSS. The description n...