StivaSoft PHPJabbers PHP Newsletter Script Cross-Site Scripting Vulnerability

StivaSoft PHPJabbers PHP Newsletter Script is a set of news system scripts from the Bulgarian company StivaSoft. admin panel is one of the administration panels. A cross-site scripting vulnerability exists in the lists of the admin panel of StivaSoft PHPJabbers PHP Newsletter Script. A remote...

CVE-2017-12810

PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel...

Cross site scripting

PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel...

CVE-2017-12810

PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel...

CVE-2017-12810

PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel...

CVE-2017-12810

Summary (CVE-2017-12810): PHPJabbers PHP Newsletter Script 4.2 contains a stored XSS vulnerability in the admin panel’s lists. Multiple sources (NVD and CNVD) describe a cross-site scripting flaw that allows an attacker to inject arbitrary script when exploiting the vulnerable lists in the admin ...

CVE-2017-12810

PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel...

CVE-2017-17987

PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetailsedit.php...

CVE-2017-17941

PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter...

CVE-2017-17930

PHP Scripts Mall Professional Service Script has CSRF via admin/generalsettingupd.php, as demonstrated by modifying a setting in the user panel...

Cross site request forgery (csrf)

PHP Scripts Mall Professional Service Script has CSRF via admin/generalsettingupd.php, as demonstrated by modifying a setting in the user panel...

CVE-2017-17827

Piwigo 2.9.2 is vulnerable to Cross‑Site Request Forgery via /admin.php?page=configuration&section=main or /admin.php?page=batch_manager&mode=unit. An attacker can exploit this to coerce an admin user into performing unintended actions. The connected records consistently describe this CSRF issue ...

Authentication flaw

Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter...

CVE-2017-17777

Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter...

CVE-2017-17777

Paid To Read Script 2.0.5 contains an authentication bypass in the admin panel that can be triggered by direct requests. The vulnerability is demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter, enabling bypass of login/auth checks and potential unaut...

CVE-2017-17777

Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter...

Paid To Read Script Authentication Bypass Vulnerability

PHP Scripts Mall Paid To Read Script is a set of paid to read website scripts by PHP Scripts Mall India. A security vulnerability exists in PHP Scripts Mall Paid To Read Script version 2.0.5. An attacker can exploit the vulnerability by sending a direct request to bypass authentication and access...

CVE-2017-17651

Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter...

TIBCO BusinessWorks Process Monitor Integration Matters nJAMS Cross-Site Scripting Vulnerability

TIBCO BusinessWorks Process Monitor is a process monitor for the BusinessWorks platform from TIBCO Software, Inc. Integration Matters nJAMS is one of the business process monitoring components used in it. A cross-site scripting vulnerability exists in TIBCO BusinessWorks Process Monitor 3.0.1.3 a...

Mapbox: Admin Panel Accessed (OAuth Bypassed )

On December 4, 2017, @aneeskhan reported an authentication bypass vulnerability on a Mapbox internal portal. The vulnerability allowed them to bypass OAuth authentication and generate a valid session for the site. This session was then used by @aneeskhan to access information on the portal which...