1406 matches found
CVE-2018-19110
The skin-management feature in tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/user/skin/list directly because controller\usercontroller.java maps a /skin/list request to the function skinList, and lacks an authorization chec...
CVE-2018-19110
The skin-management feature in tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/user/skin/list directly because controller\usercontroller.java maps a /skin/list request to the function skinList, and lacks an authorization chec...
CVE-2018-19109
tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list directly to read the column list page or edit a column...
CVE-2018-19091
tianti 2.3 has reflected XSS in the user management module via the tianti-module-admin/user/list userName parameter...
CVE-2018-19091
tianti 2.3 has reflected XSS in the user management module via the tianti-module-admin/user/list userName parameter...
Cross site scripting
tianti 2.3 has stored XSS in the article management module via an article title...
CVE-2018-19089
tianti 2.3 has stored XSS in the userlist module via the tianti-module-admin/user/ajax/saverole name parameter, which is mishandled in tianti-module-admin\src\main\webapp\WEB-INF\views\user\userlist.jsp...
CVE-2018-19090
tianti 2.3 has stored XSS in the article management module via an article title...
CVE-2018-19089
tianti 2.3 has stored XSS in the userlist module via the tianti-module-admin/user/ajax/saverole name parameter, which is mishandled in tianti-module-admin\src\main\webapp\WEB-INF\views\user\userlist.jsp...
Cross site scripting
tianti 2.3 has stored XSS in the userlist module via the tianti-module-admin/user/ajax/saverole name parameter, which is mishandled in tianti-module-admin\src\main\webapp\WEB-INF\views\user\userlist.jsp...
Cross site scripting
tianti 2.3 has reflected XSS in the user management module via the tianti-module-admin/user/list userName parameter...
CVE-2018-19089
tianti 2.3 has stored XSS in the userlist module via the tianti-module-admin/user/ajax/saverole name parameter, which is mishandled in tianti-module-admin\src\main\webapp\WEB-INF\views\user\userlist.jsp...
CVE-2018-19091
The CVE-2018-19091 entry concerns Tianti 2.3, where a reflected XSS vulnerability exists in the user management module. The issue is triggered via the tianti-module-admin/user/list userName parameter, enabling an attacker to inject scripts that may execute in a victim’s browser. The available con...
CVE-2018-19091
tianti 2.3 has reflected XSS in the user management module via the tianti-module-admin/user/list userName parameter...
CVE-2018-19090
tianti 2.3 has stored XSS in the article management module via an article title...
CVE-2018-19090
CVE-2018-19090 affects Tianti 2.3, with a stored XSS vulnerability in the article management module that is triggered via the article title. The provided documents consistently describe the issue as a stored XSS in Tianti 2.3’s article title field, without detailing affected versions beyond 2.3 o...
Information disclosure
The Interactive Advertising Bureau IAB OpenRTB 2.3 protocol implementation might allow remote attackers to conceal the status of ad transactions and potentially compromise bid integrity by leveraging failure to limit the time between bid responses and impression notifications, aka the Amnesia Bug...
CVE-2015-7266
The Interactive Advertising Bureau IAB OpenRTB 2.3 protocol implementation might allow remote attackers to conceal the status of ad transactions and potentially compromise bid integrity by leveraging failure to limit the time between bid responses and impression notifications, aka the Amnesia Bug...
CVE-2015-7266
The Interactive Advertising Bureau IAB OpenRTB 2.3 protocol implementation might allow remote attackers to conceal the status of ad transactions and potentially compromise bid integrity by leveraging failure to limit the time between bid responses and impression notifications, aka the Amnesia Bug...