CVE-2018-19906

Stored XSS exists in razorCMS 3.4.8 via the //page description parameter...

CVE-2018-19905

HTML injection exists in razorCMS 3.4.8 via the //page keywords parameter...

CVE-2018-19905

HTML injection exists in razorCMS 3.4.8 via the //page keywords parameter...

Cross site scripting

Stored XSS exists in razorCMS 3.4.8 via the //page description parameter...

Cross site scripting

HTML injection exists in razorCMS 3.4.8 via the //page keywords parameter...

CVE-2018-19906

Stored XSS exists in razorCMS 3.4.8 via the //page description parameter...

CVE-2018-19905

HTML injection exists in razorCMS 3.4.8 via the //page keywords parameter...

CVE-2018-19906

Stored XSS exists in razorCMS 3.4.8 via the //page description parameter...

CVE-2018-19905

HTML injection exists in razorCMS 3.4.8 via the //page keywords parameter...

CVE-2018-19905

razorCMS 3.4.8 is affected by an HTML injection via the /#/page keywords parameter. The issue concerns the keywords field in that endpoint, enabling arbitrary HTML injection. Remediation hints from PT-2018-15155 suggest restricting access to the /#/page API or stopping use of the keywords paramet...

Debian: Security Advisory (DLA-1596-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-17986

rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user...

CVE-2018-17986

rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user...

phpMyAdmin Multiple XSS Vulnerabilities (PMASA-2011-18) - Linux

phpMyAdmin is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress User Meta Manager 3.4.6 Information Disclosure

Exploit Title: WordPress User Meta Manager Plugin Information Disclosure Discovery Date: 2015-12-28 Public Disclosure Date: 2016-02-01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://jasonlau.biz/home/ Software Link:...

openSUSE Security Update : phpMyAdmin (openSUSE-2011-94)

update to 3.4.8 - bug 3425230 interface enum data split at space char more space to edit - bug 3426840 interface ENUM/SET editor can't handle commas in values - bug 3427256 interface no links to browse/empty views and tables - bug 3430377 interface Deleted search results remain visible - bug...

Wordpress Better WP Security Plugin - Stored XSS Vulnerability

Richard Warren ======= Summary ======= Name: Bit51 Better WP Security Plugin - Unauthenticated Stored XSS to RCE Release Date: 30 July 2013 Reference: NGS00500 Discoverer: Richard Warren Vendor: Bit51 Vendor Reference: Systems Affected: Bit51 Better WP Security Plugin Version...

WordPress Plugin Better WP Security 3.4.83.4.93.4.103.5.23.5.3 - Persistent Cross-Site Scripting

WordPress Plugin Better WP Security 3.4.83.4.93.4.103.5.23.5.3 - Persistent Cross-Site Scripting ======= Summary ======= Name: Bit51 Better WP Security Plugin - Unauthenticated Stored XSS to RCE Release Date: 30 July 2013 Reference: NGS00500 Discoverer: Richard Warren Vendor: Bit51 Vendor...

Fedora Update for phpMyAdmin FEDORA-2011-16786

Check for the Version of phpMyAdmin OpenVAS Vulnerability Test Fedora Update for phpMyAdmin FEDORA-2011-16786 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

phpMyAdmin 3.4.x < 3.4.8 XSS (PMASA-2011-18)

The version of phpMyAdmin hosted on the remote server is 3.4.x prior to 3.4.8 and is affected by a cross-site scripting vulnerability. The database name is not properly sanitized in the file 'js/dboperations.js' when attempting to rename a database. Note that this version is reportedly affected b...