403 matches found
Croogo cross-site scripting vulnerability (CNVD-2019-03589)
Croogo is a content management system CMS based on the CakePHP framework development . The system provides content type can be customized for Blog, Node, Page, content editing using WYSIWYG editor and other features. A cross-site scripting vulnerability exists in Croogo 3.0.5 and earlier versions...
Fedora 29 : capstone (2018-974e947d3b)
update to upstream 3.0.5 to fix CVE-2017-6952 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
CVE-2018-16453
PHP Scripts Mall Domain Lookup Script 3.0.5 allows XSS in the search bar...
CVE-2018-16453
The CVE-2018-16453 entry affects PHP Scripts Mall Domain Lookup Script 3.0.5, with a cross-site scripting (XSS) issue in the search bar. Multiple connected sources (NVD, CVE listings, PT-2018-13578) confirm the affected software and vulnerability type. Root cause / vulnerable component: the domai...
PT-2018-13578 · Php Scripts Mall · Php Scripts Mall Domain Lookup Script
Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Domain Lookup Script version 3.0.5 Description: The issue allows for cross-site scripting XSS in the search bar. Recommendations: For PHP Scripts Mall Domain Lookup Script version 3.0.5, update the script to a version that...
Jcomments, version 3.0.5, Input Validation Vulnerability
jcomments,versions 3.0.5 and all previous, inadequate input validation of objectgroup parameter leads to possible exploits including arbitrary local file inclusion resolution: update to version 3.0.6 There is evidence that this is being actively exploited, so users are recommended to update ASAP...
Invitex, 3.0.5, SQL Injection
Invitex by techjoomla.com, versions 3.0.5 and previous, SQL Injection resolution: update to 3.0.6 update notice: https://techjoomla.com/blog/jgive/release-updates-for-jticketing-jboloand-invitex...
Electrum Technologies GmbH Electrum Bitcoin Wallet Information Disclosure Vulnerability
Electrum Technologies GmbH Electrum Bitcoin Wallet is a lightweight bitcoin wallet software. A security vulnerability exists in the JSONRPC interface in Electrum Technologies GmbH Electrum Bitcoin Wallet versions prior to 3.0.5. An attacker could exploit this vulnerability to steal bitcoins...
CVE-2018-6394
SQL Injection exists in the InviteX 3.0.5 component for Joomla! via the invitetype parameter in a view=invites action...
Sql injection
SQL Injection exists in the InviteX 3.0.5 component for Joomla! via the invitetype parameter in a view=invites action...
CVE-2018-6394
SQL Injection exists in the InviteX 3.0.5 component for Joomla! via the invitetype parameter in a view=invites action...
CVE-2018-6394
CVE-2018-6394 affects the Joomla! InviteX component version 3.0.5, where an SQL injection is exposed in the invite_type parameter of the view=invites action. The root cause is an unsafely handled user-controlled input leading to SQL injection, enabling an attacker to manipulate the backend databa...
Joomla! InviteX 3.0.5 SQL Injection
Exploit Title: Joomla! Component InviteX 3.0.5 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://techjoomla.com/ Software Link: https://extensions.joomla.org/extensions/extension/content-sharing/bookmark-a-recommend/invitex/ Version: 3.0.5 Category: Webapps Tested on:...
Authorization
Electrum Technologies GmbH Electrum Bitcoin Wallet version prior to version 3.0.5 contains a Missing Authorization vulnerability in JSONRPC interface that can result in Bitcoin theft, if the user's wallet is not password protected. This attack appear to be exploitable via The victim must visit a...
DEBIAN-CVE-2018-1000022
Electrum Technologies GmbH Electrum Bitcoin Wallet version prior to version 3.0.5 contains a Missing Authorization vulnerability in JSONRPC interface that can result in Bitcoin theft, if the user's wallet is not password protected. This attack appear to be exploitable via The victim must visit a...
Joomla! JEXTN Video Gallery extension SQL injection vulnerability
Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features . JEXTN Video Gallery extension is used in one of the video online sharing plug-ins. A SQL injection vulnerability exists in...
Auth0 passport-wsfed-saml2 elevation of privilege vulnerability
Auth0 passport-wsfed-saml2 library is a set of Auth0 development platform of the United States Auth0 company's tool library . A security vulnerability exists in Auth0 passport-wsfed-saml2 library versions prior to 3.0.5. An attacker can exploit the vulnerability to spoof other users and potential...
JEXTN Video Gallery 3.0.5 - SQL Injection, 3.0.5 ,SQL Injection
JEXTN Video Gallery 3.0.5 - SQL Injection, 3.0.5 ,SQL Injection...