347 matches found
PT-2017-9095
Name of the Vulnerable Software and Affected Versions b2evolution versions 6.7.5 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors related to the autolink function. Recommendations For versions 6.7.5 and earlier,...
PT-2017-9096
Name of the Vulnerable Software and Affected Versions b2evolution versions 6.7.5 and earlier Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the site name. This could potentially lead to unauthorized actions on the site...
Directory Traversal
b2evolution is vulnerable to directory traversal vulnerability. It allows remote authenticated users to read or delete arbitrary files by leveraging back-office access to provide a .. dot dot in the fmselected array parameter of inc/files/files.ctrl.php...
Remote Web Code Execution
b2evolution is vulnerable to remote code execution vulnerabilities. It allows remote authenticated users to inject arbitrary web script or HTML via a .swf file in a comment frame or avatar frame of the file types table...
Multiple Cross-Site Scripting Vulnerabilities in b2evolution
b2evolution is a PHP and MySQL based blogging software developed by software developer FrancoisPlanque. A cross-site scripting vulnerability exists in the file type table of b2evolution versions prior to 6.8.3. The vulnerability can be exploited by remote attackers to inject arbitrary web script ...
b2evolution directory traversal vulnerability
b2evolution is a PHP and MySQL based blogging software developed by software developer Francois Planque. A directory traversal vulnerability exists in b2evolution 6.8.3 and earlier versions, which results from the program failing to adequately validate user-supplied input. A remote attacker could...
CVE-2017-5494
Multiple cross-site scripting XSS vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote authenticated users to inject arbitrary web script or HTML via a .swf file in a 1 comment frame or 2 avatar frame...
CVE-2017-5480
Directory traversal vulnerability in inc/files/files.ctrl.php in b2evolution through 6.8.3 allows remote authenticated users to read or delete arbitrary files by leveraging back-office access to provide a .. dot dot in the fmselected array parameter...
Directory traversal
Directory traversal vulnerability in inc/files/files.ctrl.php in b2evolution through 6.8.3 allows remote authenticated users to read or delete arbitrary files by leveraging back-office access to provide a .. dot dot in the fmselected array parameter...
CVE-2017-5494
Multiple cross-site scripting XSS vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote authenticated users to inject arbitrary web script or HTML via a .swf file in a 1 comment frame or 2 avatar frame...
CVE-2017-5480
The CVE-2017-5480 issue affects b2evolution’s back-office flow, specifically the PHP file inc/files/files.ctrl.php. A directory traversal flaw permits remote authenticated users to read or delete arbitrary files by injecting a dot-dot sequence into the fm_selected array parameter. Affected softwa...
CVE-2017-5480
Directory traversal vulnerability in inc/files/files.ctrl.php in b2evolution through 6.8.3 allows remote authenticated users to read or delete arbitrary files by leveraging back-office access to provide a .. dot dot in the fmselected array parameter...
CVE-2017-5480
Directory traversal vulnerability in inc/files/files.ctrl.php in b2evolution through 6.8.3 allows remote authenticated users to read or delete arbitrary files by leveraging back-office access to provide a .. dot dot in the fmselected array parameter...
CVE-2017-5494
CVE-2017-5494 affects b2evolution before 6.8.3. Multiple XSS vulnerabilities exist in the file types table, enabling remote authenticated users to inject arbitrary web script or HTML via a .swf file in either the comment frame or the avatar frame. Documents consistently describe the affected comp...
CVE-2017-5494: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote authenticated users to inject arbitrary web script or HTML via a .swf file in a 1 comment frame or 2 avatar frame...
PT-2017-16535
Name of the Vulnerable Software and Affected Versions b2evolution versions prior to 6.8.4 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a .swf file in a comment frame or avatar frame, potentially leading to cross-site scripting XSS attacks...
PT-2017-16521
Name of the Vulnerable Software and Affected Versions b2evolution versions prior to 6.8.4 Description A directory traversal issue exists, allowing remote authenticated users to read or delete arbitrary files. This is achieved by providing a .. dot dot in the fm selected array parameter in the...
CVE-2017-5480: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in inc/files/files.ctrl.php in b2evolution through 6.8.3 allows remote authenticated users to read or delete arbitrary files by leveraging back-office access to provide a .. dot dot in the fmselected array parameter...
b2evolution Arbitrary User Password Reset Vulnerability
b2evolution is a PHP and MySQL based blogging software developed by software developer Francois Planque. A security vulnerability exists in the 'lost password' feature in b2evolution versions prior to 6.7.9. The vulnerability can be exploited by a remote attacker to reset the password of any user...