CVE-2017-20033

PHPList 3.2.6 is affected by a reflected cross-site scripting (XSS) vulnerability in the /lists/admin/ page, triggered by the input value sending'";>. The issue is exploitable remotely and is mitigated by upgrading to PHPList 3.3.1. Connected documents confirm the affected version and the upgr...

CVE-2017-20032

PHPList 3.2.6 is affected by a remote SQL injection in the Subscription component. The vulnerability can be exploited without authentication and is rated as CRITICAL (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Public exploit(s) have been disclosed. Upgrading to PHPList 3.3.1 addresses the is...

CVE-2017-20030

PHPList 3.2.6 has an SQL injection in an unknown function under /lists/admin/ of the Sending Campaign component. The issue allows remote exploitation; public exploit/disclosures exist. Upgrading to 3.3.1 addresses the vulnerability.

phplist 安全漏洞

phplist is an open source newsletter and email marketing software from phplist UK. phplist version 3.2.6 is vulnerable to information disclosure. An attacker could exploit the vulnerability by entering a password to sort the parameters, which could lead to information disclosure...

phplist SQL注入漏洞

phplist is a suite of open source newsletter and email marketing software from the UK-based phplist. Version 3.2.6 of phplist contains a security vulnerability that can be exploited by attackers to conduct SQL injection attacks...

phplist 跨站脚本漏洞

phplist is a set of open source newsletter and email marketing software from phplist UK. phplist version 3.2.6 has a security vulnerability that can be exploited by attackers to conduct cross-site scripting attacks...

phplist 跨站脚本漏洞

phplist is a set of open source newsletter and email marketing software from the UK-based phplist. Version 3.2.6 of phplist contains a security vulnerability that could be used by attackers to conduct cross-site scripting attacks...

phplist 跨站脚本漏洞

phplist is a set of open source newsletter and email marketing software from the UK-based phplist. Version 3.2.6 of phplist contains a security vulnerability that can be exploited by attackers to conduct cross-site scripting attacks...

phplist SQL注入漏洞

phplist is a suite of open source newsletter and email marketing software from the UK-based phplist. Version 3.2.6 of phplist contains a security vulnerability that can be exploited by attackers to conduct SQL injection attacks...

phplist 跨站脚本漏洞

phplist is a set of open source newsletter and email marketing software from the UK-based phplist. Version 3.2.6 of phplist contains a security vulnerability that can be exploited by attackers to conduct cross-site scripting attacks...

Python 3.2.x < 3.2.6, 3.3.x < 3.3.6, 3.4.x < 3.4.1 os.makedirs() not thread-safe (bpo-21082) - Linux

Python is prone to a local security bypass vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

GHSA-CQ6W-W5RJ-P9X8 Cross-site Scripting in Froala Editor

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

Security fix for the ALT Linux 10 package python3-module-django version 3.2.6-alt1

3.2.6-alt1 built Sept. 10, 2021 Alexey Shabalin in task 283535 Aug. 18, 2021 Alexey Shabalin - new version 3.2.6 - Rename dbbackend-psycopg2 to dbbackend-postgresql - Add dbbackend-oracle package - Fixes for the following security vulnerabilities: + CVE-2021-35042 Potential SQL injection via...

CVE-2021-28114

Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing...

Type confusion

Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing...

Froala Editor Cross-Site Scripting Vulnerability

Froala Editor is a Web-based WYSIWYG rich text editor . A cross-site scripting vulnerability exists in the hyperlink creation module in Froala Editor version 3.2.6. The vulnerability can be exploited to conduct cross-site scripting attacks via specially crafted base64 strings...

CVE-2021-30109

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

Cross site scripting

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

CVE-2021-30109

Affected product: Froala Editor 3.2.6. Vulnerability: Cross-site scripting (XSS) in the hyperlink creation module. Root cause: base64 crafted strings can trigger persistent XSS under certain conditions. Impact: persistent XSS described; no specifics on affected platforms beyond Froala Editor 3.2....

froala editor 跨站脚本漏洞

Froala Editor is a Web-based WYSIWYG rich text editor . A cross-site scripting vulnerability exists in the hyperlink creation module in Froala Editor version 3.2.6. The vulnerability can be exploited to conduct cross-site scripting attacks via specially crafted base64 strings...