CVE-2017-7881

BigTree CMS through 4.2.17 relies on a substring check for CSRF protection, which allows remote attackers to bypass this check by placing the required admin/developer/ URI within a query string in an HTTP Referer header. This was found in core/admin/modules/developer/header.php and patched in...

b2evolution directory traversal vulnerability (CNVD-2017-01294)

b2evolution is a PHP and MySQL based blogging software developed by software developer Francois Planque. b2evolution suffers from a directory traversal vulnerability that stems from an incomplete fix for the directory traversal vulnerability CVE-2017-5480 patch. An attacker via ... / can bypass...

falkopingtorget.se XSS vulnerability

Vulnerable URL: http://www.falkopingtorget.se/?page=main=0=0=0=" Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 14:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9952261 Google Pagerank| 0 VIP website...