CVE-2021-20665

Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier Movable Type 7 Series, Movable Type Advanced 7 r.4705 and earlier Movable Type Advanced 7 Series, Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and...

Screenly screenly-ose 跨站脚本漏洞

Screenly-ose is an application software. screenly OSE - Digital Signage for Raspberry Pi. A security vulnerability exists in all versions of Screenly screenly-ose, which arises from manipulating a "URL" field on the "Add Asset" page, which could allow a remote malicious user to execute arbitrary...

PT-2021-10587

Name of the Vulnerable Software and Affected Versions: Screenly screenly-ose all versions Description: The issue is related to a Cross Site Scripting vulnerability in the 'Add Asset' page. It can be exploited via manipulation of the URL field, potentially allowing a remote malicious user to execu...

CVE-2021-20665

Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier Movable Type 7 Series, Movable Type Advanced 7 r.4705 and earlier Movable Type Advanced 7 Series, Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and...

CVE-2021-20665

Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier Movable Type 7 Series, Movable Type Advanced 7 r.4705 and earlier Movable Type Advanced 7 Series, Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and...

Cross site scripting

Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier Movable Type 7 Series, Movable Type Advanced 7 r.4705 and earlier Movable Type Advanced 7 Series, Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and...

CVE-2021-20665

Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier Movable Type 7 Series, Movable Type Advanced 7 r.4705 and earlier Movable Type Advanced 7 Series, Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and...

PT-2021-14125

Name of the Vulnerable Software and Affected Versions: Movable Type 7 versions 7.0.0 through 7 r.4705 Movable Type Advanced 7 versions 7.0.0 through 7 r.4705 Movable Type Premium version 1.39 and earlier Movable Type Premium Advanced version 1.39 and earlier Description: A cross-site scripting...

CVE-2021-20665: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier Movable Type 7 Series, Movable Type Advanced 7 r.4705 and earlier Movable Type Advanced 7 Series, Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and...

Multiple cross-site scripting vulnerabilities in Movable Type

Overview Movable Type provided by Six Apart Ltd. contains multiple cross-site scripting vulnerabilities listed below. Cross-site scripting vulnerability in Role authority setting screen CWE-79 - CVE-2021-20663 Cross-site scripting vulnerability in Asset registration screen CWE-79 - CVE-2021-20664...

JVN#66542874: Multiple cross-site scripting vulnerabilities in Movable Type

Movable Type provided by Six Apart Ltd. contains multiple cross-site scripting vulnerabilities listed below. Cross-site scripting vulnerability in Role authority setting screen CWE-79 - CVE-2021-20663 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base...

CVE-2015-4425

Directory traversal vulnerability in pimcore before build 3473 allows remote authenticated users with the "assets" permission to create or write to arbitrary files via a .. dot dot in the dir parameter to admin/asset/add-asset-compatibility...

CVE-2015-4425: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pimcore before build 3473 allows remote authenticated users with the "assets" permission to create or write to arbitrary files via a .. dot dot in the dir parameter to admin/asset/add-asset-compatibility...

PT-2015-6586

Name of the Vulnerable Software and Affected Versions pimcore versions prior to build 3473 Description The issue allows remote authenticated users with the "assets" permission to create or write to arbitrary files via a .. dot dot in the dir parameter to "admin/asset/add-asset-compatibility"...