CVE-2020-28672

MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution. At monofiles/category.php:27, user input can be saved to category/foldername/index.php causing RCE...

CVE-2020-28672

MonoCMS Blog 1.0 is affected by an Access Control Error that can lead to remote arbitrary code execution. The issue arises at monofiles/category.php:27, where user input can be saved to category/[foldername]/index.php, enabling RCE. This CVE is CVE-2020-28672. The connected sources corroborate a ...

CVE-2020-28672: Undefined Security Weakness

MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution. At monofiles/category.php:27, user input can be saved to category/foldername/index.php causing RCE...

PT-2021-11575

Name of the Vulnerable Software and Affected Versions: MonoCMS Blog version 1.0 Description: The issue is related to incorrect access control, which can lead to remote arbitrary code execution. Specifically, at monofiles/category.php:27, user input can be saved to category/foldername/index.php,...

MonoCMS Blog: Access Control Vulnerability

Mono is an open source software platform for creating .NET cross-platform applications. MonoCMS Blog 1.0 suffers from an Access Control Error vulnerability that stems from incorrect access control and leads to remote execution of arbitrary code...

Friday Squid Blogging: Linguine allo Scoglio Recipe

Delicious seafood pasta dish -- includes squid -- from Americas Test Kitchen. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...

Microsoft Internal Solorigate Investigation Update

As we said in our recent blog, we believe the Solorigate incident is an opportunity to work together in important ways, to share information, strengthen defenses and respond to attacks. Like other SolarWinds customers, we have been actively looking for indicators of the Solorigate actor and want ...

FluxBB Cross-Site Scripting Vulnerability

FluxBB is an open source forum application. A cross-site scripting vulnerability exists in the "Blog Content" component of FluxBB 1.5.11. An attacker can exploit this vulnerability to steal cookies...

FlatPress Cross-Site Scripting Vulnerability (CNVD-2020-75633)

FlatPress is a lightweight, easy to set up blogging engine. A cross-site scripting vulnerability exists in the "Blog Content" component of FlatPress 1.0.3. An attacker can exploit this vulnerability to steal cookies...

h1-ctf: Writeup Submission

The Write-Up will be published within the next hours latest till Dec. 31st 12:00 PST under https://blogs.tippexs.io User: h4ck4r0ne Pass: s4nt4sucks Let me know if I need to submit anything else. I have started crafting an PDF but it become that huge that I have decided to create a complete new...

CVE-2020-35241

FlatPress 1.0.3 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie...

CVE-2020-35240

FluxBB 1.5.11 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in "Blog Content" and each time any user will visit the blog, the XSS triggers and the attacker can able to steal the cookie according to the...

CVE-2020-35241

FlatPress 1.0.3 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie...

CVE-2020-35240

FluxBB 1.5.11 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in "Blog Content" and each time any user will visit the blog, the XSS triggers and the attacker can able to steal the cookie according to the...

Cross site scripting

FluxBB 1.5.11 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in "Blog Content" and each time any user will visit the blog, the XSS triggers and the attacker can able to steal the cookie according to the...

CVE-2020-35241

FlatPress 1.0.3 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie...

CVE-2020-35240

FluxBB 1.5.11 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in "Blog Content" and each time any user will visit the blog, the XSS triggers and the attacker can able to steal the cookie according to the...

CVE-2020-35240

FluxBB 1.5.11 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in "Blog Content" and each time any user will visit the blog, the XSS triggers and the attacker can able to steal the cookie according to the...

PT-2020-17297

Name of the Vulnerable Software and Affected Versions FluxBB version 1.5.11 Description The issue allows an attacker to inject a cross-site scripting XSS payload in the "Blog Content" component. When any user visits the blog, the XSS triggers, enabling the attacker to steal cookies based on the...

CVE-2020-35240: Improper Neutralization of Input During Web Page Generation

FluxBB 1.5.11 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in "Blog Content" and each time any user will visit the blog, the XSS triggers and the attacker can able to steal the cookie according to the...