CVE-2016-1170

Cross-site request forgery CSRF vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to hijack the authentication of administrators...

CVE-2016-1169

Cross-site scripting XSS vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1169

Cross-site scripting XSS vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to hijack the authentication of administrators...

Cross site scripting

Cross-site scripting XSS vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators...

Cross site scripting

Cross-site scripting XSS vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators...

Cross site scripting

Cross-site scripting XSS vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1169

Cross-site scripting XSS vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1171

The CVE-2016-1171 issue affects the baserCMS Recruit plugin, specifically versions prior to 0.9.3. A cross-site scripting (XSS) vulnerability exists that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. "Recruit" is described as a job-listing plugin for base...

CVE-2016-1169

CVE-2016-1169 is a cross-site scripting (XSS) vulnerability in the Casebook plugin for baserCMS, affecting versions prior to 0.9.4. The connected sources (CNVD/JVN/NVD) confirm an XSS flaw that allows remote attackers to inject arbitrary script or HTML via unspecified vectors. Impact is described...

CVE-2016-1170

Cross-site request forgery CSRF vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to hijack the authentication of administrators...

CVE-2016-1172

Cross-site request forgery CSRF vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators...

CVE-2016-1173

Cross-site scripting XSS vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1173

The CVE-2016-1173 issue affects the Menubook plugin for baserCMS prior to 0.9.3, described as a Cross-Site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The vulnerability originates in the Menubook plugin’s handling of i...

CVE-2016-1171

Cross-site scripting XSS vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1174

Cross-site request forgery CSRF vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators...

CVE-2016-1174

CVE-2016-1174 affects the Menubook plugin for baserCMS, versions prior to 0.9.3. The vulnerability is a CSRF flaw in the plugin that allows remote attackers to hijack the authentication of administrators. The affected component is the Menubook plugin; root cause is CSRF in that plugin. Exploitati...

CVE-2016-1172

CVE-2016-1172 is a CSRF vulnerability in the baserCMS Recruit plugin prior to version 0.9.3 that can hijack administrator sessions. Multiple sources (NVD, CNVD, PRION, CVE list) corroborate the affected plugin and vulnerability description. CVSS‑3.0 base score is 8.8 (High) with NETWORK attack ve...