CVE-2017-17972

CVE-2017-17972 affects Archon 3.21 rev-1 (packages/subjects/pub/subjects.php). The issue is a cross-site scripting (XSS) vulnerability in the referer parameter of an index.php?subjecttypeid=xxx request. Public references include Open Bug Bounty report OBB-466362; Red Hat/NVD records corroborate t...

Archon Cross-Site Scripting Vulnerability

Archon is a system of online catalog sites for manuscript collections at the Maine Maritime Museum. A cross-site scripting vulnerability exists in the packages/core/contact.php file in Archon version 3.21 rev-1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HT...

CVE-2017-17911

packages/core/contact.php in Archon 3.21 rev-1 has XSS in the referer parameter in an index.php?p=core/contact request, aka Open Bug Bounty ID OBB-278503...

CVE-2017-17911

packages/core/contact.php in Archon 3.21 rev-1 has XSS in the referer parameter in an index.php?p=core/contact request, aka Open Bug Bounty ID OBB-278503...

Design/Logic Flaw

packages/core/contact.php in Archon 3.21 rev-1 has XSS in the referer parameter in an index.php?p=core/contact request, aka Open Bug Bounty ID OBB-278503...

CVE-2017-17911

packages/core/contact.php in Archon 3.21 rev-1 has XSS in the referer parameter in an index.php?p=core/contact request, aka Open Bug Bounty ID OBB-278503...

CVE-2017-17911

The CVE-2017-17911 entry concerns Archon CMS, affected with XSS in packages/core/contact.php (Archon 3.21 rev-1) via the referer parameter in an index.php?p=core/contact request. The root cause is a cross‑site scripting flaw in the referer handling, potentially affecting users who view or interac...

smclibrary.com XSS vulnerability

Vulnerable URL: http://www.smclibrary.com/archon/index.php?p=collections/research=email=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicl...