EUVD-2009-3775

Malware in sbrugna...

EUVD-2024-52982

Malicious code in bioql PyPI...

EUVD-2024-52983

Malicious code in bioql PyPI...

CVE-2024-56116

A Cross-Site Request Forgery vulnerability in Amiro.CMS before 7.8.4 allows remote attackers to create an administrator account...

CVE-2024-56115

A vulnerability in Amiro.CMS before 7.8.4 exists due to the failure to take measures to neutralize special elements. It allows remote attackers to conduct a Cross-Site Scripting XSS attack...

CVE-2024-56116

A Cross-Site Request Forgery vulnerability in Amiro.CMS before 7.8.4 allows remote attackers to create an administrator account...

CVE-2024-56116

Amiro.CMS is affected by CVE-2024-56116: a Cross-Site Request Forgery flaw in versions prior to 7.8.4 allows remote attackers to create an administrator account. The CVSS‑3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a base score of 8.8 (High). Exploitation is not clearly shown in the p...

CVE-2024-56116

A Cross-Site Request Forgery vulnerability in Amiro.CMS before 7.8.4 allows remote attackers to create an administrator account...

PT-2024-36717 · Amiro.Cms · Amiro.Cms

Name of the Vulnerable Software and Affected Versions: Amiro.CMS versions prior to 7.8.4 Description: A vulnerability exists due to the failure to take measures to neutralize special elements, allowing remote attackers to conduct a Cross-Site Scripting XSS attack. Recommendations: For Amiro.CMS...

PT-2024-36718 · Amiro.Cms · Amiro.Cms

Name of the Vulnerable Software and Affected Versions: Amiro.CMS versions prior to 7.8.4 Description: A Cross-Site Request Forgery vulnerability in Amiro.CMS allows remote attackers to create an administrator account. Recommendations: For Amiro.CMS versions prior to 7.8.4, update to version 7.8.4...

Amiro.CMS <= 5.4.0.0 folder disclosure

No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ONSEC-09-005 Amiro.CMS root folder disclosure Objective: Amiro CMS = 5.4.0.0 Type: Disclosure of ways Threat: Medium Date Discovered: 01.07.2009 Date of...

XSS vulnerability in Amiro.CMS FAQ

Vulnerability ID: HTB22590 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinamirocms1.html Product: Amiro.CMS Vendor: Amiro http://www.amiro.ru/ Vulnerable Version: 5.8.4.0 and Probably Prior Versions Vendor Notification: 18 August 2010 Vulnerability Type: Stored XSS Cross Site...

Amiro.CMS 5.8.4.0 - Multiple HTML Injection Vulnerabilities

Amiro.CMS 5.8.4.0 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/42908/info Amiro.CMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful...

Amiro.CMS 5.8.4.0 Cross Site Scripting

Vulnerability ID: HTB22590 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinamirocms1.html Product: Amiro.CMS Vendor: Amiro http://www.amiro.ru/ Vulnerable Version: 5.8.4.0 and Probably Prior Versions Vendor Notification: 18 August 2010 Vulnerability Type: Stored XSS Cross Site...

Amiro.CMS 5.8.4.0 - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/42908/info Amiro.CMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to r...

Cross-site Request Forgery (CSRF) Vulnerabilities in Amiro.CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Amiro.CMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Amiro.CMS 1.1 The vulnerability exists due to insufficient validation of the request origin i...

Design/Logic Flaw

Amiro.CMS 5.4.0.0 and earlier allows remote attackers to obtain sensitive information via an invalid loginname "%%%" to admin/index.php, which reveals the installation path and other information in an error message...

CVE-2009-3803

Multiple cross-site scripting XSS vulnerabilities in Amiro.CMS 5.4.0.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the statusmessage parameter to 1 /news, 2 /comment, 3 /forum, 4 /blog, and 5 /tags; the statusmessage parameter to 6 forum.php, 7 discussion.php, 8...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Amiro.CMS 5.4.0.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the statusmessage parameter to 1 /news, 2 /comment, 3 /forum, 4 /blog, and 5 /tags; the statusmessage parameter to 6 forum.php, 7 discussion.php, 8...

CVE-2009-3802

Amiro.CMS 5.4.0.0 and earlier allows remote attackers to obtain sensitive information via an invalid loginname "%%%" to admin/index.php, which reveals the installation path and other information in an error message...