CVE-2017-20034

phplist 3.2.6 contains a persistent cross-site scripting vulnerability in the /lists/admin/ portion of the List Name component. The issue can be triggered remotely and arises from an unspecified root cause in the affected code path. Upgrading to version 3.3.1 addresses the vulnerability. If upgra...

CVE-2017-20033 PHPList Reflected cross site scriting

A vulnerability classified as problematic has been found in PHPList 3.2.6. This affects an unknown part of the file /lists/admin/. The manipulation of the argument page with the input send'";alert8 leads to cross site scripting Reflected. It is possible to initiate the attack remotely. Upgrading...

CVE-2017-20033

PHPList 3.2.6 is affected by a reflected cross-site scripting (XSS) vulnerability in the /lists/admin/ page, triggered by the input value sending'";>. The issue is exploitable remotely and is mitigated by upgrading to PHPList 3.3.1. Connected documents confirm the affected version and the upgr...

CVE-2017-20032 PHPList Subscription sql injection

A vulnerability was found in PHPList 3.2.6. It has been rated as critical. Affected by this issue is some unknown functionality of the component Subscription. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2017-20031 PHPList information disclosure

A vulnerability was found in PHPList 3.2.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument sortby with the input password leads to information disclosure. The attack can be launched remotely. The exploit has been...

CVE-2017-20031

CVE-2017-20031 (PHPList 3.2.6) is an information-disclosure vulnerability caused by manipulating the sortby parameter with the input password, allowing remote abuse. The issue affects phplist’s 3.2.6 release and is publicly disclosed; upgrading to version 3.3.1 is the recommended fix. The availab...

CVE-2017-20030 PHPList Sending Campain sql injection

A vulnerability was found in PHPList 3.2.6. It has been classified as critical. Affected is an unknown function of the file /lists/admin/ of the component Sending Campain. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2017-20029 PHPList Edit Subscription index.php sql injection

A vulnerability was found in PHPList 3.2.6 and classified as critical. This issue affects some unknown processing of the file /lists/index.php of the component Edit Subscription. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

CVE-2017-20029 PHPList Edit Subscription index.php sql injection

A vulnerability was found in PHPList 3.2.6 and classified as critical. This issue affects some unknown processing of the file /lists/index.php of the component Edit Subscription. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

CVE-2017-20029

CVE-2017-20029 affects PHPList 3.2.6, specifically a SQL injection vulnerability in the Edit Subscription flow (processing of /lists/index.php). The issue allows remote exploitation and has been publicly disclosed. The root cause is an improper handling of input in that component, enabling arbitr...

CVE-2017-20023

A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as critical. This issue affects some unknown processing of the component Network Config. The manipulation leads to privilege escalation. The attack may be initiated remotely. Upgrading to version 3.5.3-86 is able to...

CVE-2017-20018

A vulnerability was found in XAMPP 7.1.1-0-VC14. It has been classified as problematic. Affected is an unknown function of the component Installer. The manipulation leads to privilege escalation. It is possible to launch the attack remotely...

CVE-2017-20019

A vulnerability classified as problematic was found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this vulnerability is an unknown functionality of the component Config Handler. The manipulation leads to information disclosure. The attack can be launched remotely. Upgrading to version 3.5.3-...

CVE-2017-20028 HumHub privileges management

A vulnerability was found in HumHub 0.20.1/1.0.0-beta.3. It has been classified as critical. This affects an unknown part. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. Upgrading to version 1.0.0 is able to address this issue. It is recommended to...

CVE-2017-20028

The vulnerability (CVE-2017-20028) affects HumHub versions 0.20.1 and 1.0.0-beta.3. The issue enables privilege escalation and is exploitable remotely. The mitigation is upgrading to HumHub 1.0.0, as indicated by multiple sources in the Connected documents. Current documents do not specify the ex...

CVE-2017-20028 HumHub privileges management

A vulnerability was found in HumHub 0.20.1/1.0.0-beta.3. It has been classified as critical. This affects an unknown part. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. Upgrading to version 1.0.0 is able to address this issue. It is recommended to...

CVE-2017-20027

The CVE-2017-20027 issue affects HumHub up to version 1.0.1 and is described as a DOM-based cross-site scripting vulnerability stemming from lack of input/data filtering. The attack could be launched remotely and exploit details are publicly disclosed; upgrading to version 1.1.1 is listed as the ...

CVE-2017-20027 HumHub DOM cross site scriting

A vulnerability was found in HumHub up to 1.0.1 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting DOM. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to...

CVE-2017-20027 HumHub DOM cross site scriting

A vulnerability was found in HumHub up to 1.0.1 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting DOM. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to...

CVE-2017-20026 HumHub Reflected cross site scriting

A vulnerability has been found in HumHub up to 1.0.1 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting Reflected. The attack can be launched remotely. The exploit has been disclosed to the public and may be...