CVE-2023-41646

Buttercup v2.20.3 is vulnerable: an attacker can obtain the master password hash by reading the vaults.json file. Root cause cited: exposure of vaults.json without proper protection. Impact per sources: potential leakage of master password hash (CVSS 3.1 base score 5.3, Confidentiality impact Low...

CVE-2023-41646

Buttercup v2.20.3 allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/...

CVE-2023-41646

Buttercup v2.20.3 allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/...

Buttercup WFM Title Parameter Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24269/info Buttercup WFM Web File Manager is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

CVE-2007-3049

Cross-site scripting XSS vulnerability in index.php in Buttercup web file manager BWFM May 2007 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

CVE-2007-3049

CVE-2007-3049 : In Buttercup Web File Manager (BWFM), the vulnerability is an XSS in index.php via the title parameter. The root cause is lack of input sanitization on the title field, allowing remote attackers to inject arbitrary web script/HTML. According to the NVD entry, the impact is partial...

CVE-2007-3049

Cross-site scripting XSS vulnerability in index.php in Buttercup web file manager BWFM May 2007 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

Buttercup WFM - Title Cross-Site Scripting

Buttercup WFM - Title Cross-Site Scripting source: https://www.securityfocus.com/bid/24269/info Buttercup WFM Web File Manager is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Buttercup WFM - 'Title' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24269/info Buttercup WFM Web File Manager is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...