4227 matches found
CVE-2018-16332
An issue was discovered in iCMS 7.0.9. There is an admincp.php?app=article&do=update CSRF vulnerability...
PT-2018-13495
Name of the Vulnerable Software and Affected Versions iCMS version 7.0.9 Description An issue was discovered in the software, which is related to a CSRF vulnerability in the admincp.php endpoint, specifically when app=article and do=update. Recommendations For iCMS version 7.0.9, consider...
CVE-2018-16332: Cross-Site Request Forgery (CSRF)
An issue was discovered in iCMS 7.0.9. There is an admincp.php?app=article&do=update CSRF vulnerability...
CVE-2018-15566
tp5cms through 2017-05-25 has XSS via the admin.php/article/index.html q parameter...
PT-2018-13091
Name of the Vulnerable Software and Affected Versions tp5cms versions prior to 2017-05-25 Description The issue allows for XSS via the q parameter in the "admin.php/article/index.html" API endpoint. Recommendations For versions prior to 2017-05-25, avoid using the q parameter in the...
CVE-2018-15566: Improper Neutralization of Input During Web Page Generation
tp5cms through 2017-05-25 has XSS via the admin.php/article/index.html q parameter...
2018-08 Security Update for Adobe Flash Player for Windows 8.1 for x86-based Systems (KB4343902)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2018-08 Security Update for Adobe Flash Player for Windows 10 Version 1507 for x86-based Systems (KB4343902)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2018-08 Security Update for Adobe Flash Player for Windows 10 Version 1709 for x86-based Systems (KB4343902)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2018-08 Security Update for Adobe Flash Player for Windows 10 Version 1803 for x86-based Systems (KB4343902)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2018-08 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4343887)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2018-08 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4343897)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2018-08 Security Update for Adobe Flash Player for Windows 10 Version 1607 for x86-based Systems (KB4343902)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
CVE-2018-15129
ThinkSAAS through 2018-07-25 has XSS via the index.php?app=article&ac=comment&ts=do content parameter...
CVE-2018-15129
ThinkSAAS through 2018-07-25 has XSS via the index.php?app=article&ac=comment&ts=do content parameter...
PT-2018-12886
Name of the Vulnerable Software and Affected Versions ThinkSAAS versions prior to 2018-07-25 Description The issue allows for XSS via the content parameter in the "index.php?app=article&ac=comment&ts=do" endpoint. Recommendations For versions prior to 2018-07-25, update to a version released afte...
CVE-2018-12429: Improper Neutralization of Input During Web Page Generation
JEESNS through 1.2.1 allows XSS attacks by ordinary users who publish articles containing a crafted payload in order to capture an administrator cookie...
CVE-2018-13999
Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter aka an article posted by an administrator...
