EUVD-2018-4943

Malware in sbrugna...

EUVD-2018-8828

Malware in sbrugna...

CVE-2018-17045

An issue was discovered in CMS MaeloStore V.1.5.0. There is a CSRF vulnerability that can change the administrator password via admin/modul/users/aksiusers.php?act=update...

PT-2018-13859

Name of the Vulnerable Software and Affected Versions CMS MaeloStore version 1.5.0 Description A CSRF issue allows changing the administrator password via the "admin/modul/users/aksi users.php?act=update" API endpoint. Recommendations For CMS MaeloStore version 1.5.0, as a temporary workaround,...

CVE-2018-17045: Cross-Site Request Forgery (CSRF)

An issue was discovered in CMS MaeloStore V.1.5.0. There is a CSRF vulnerability that can change the administrator password via admin/modul/users/aksiusers.php?act=update...

CVE-2018-12992

An issue was discovered CMS MaeloStore V.1.5.0. There is stored XSS in the Telephone field of the admin interface...

Cross site scripting

An issue was discovered CMS MaeloStore V.1.5.0. There is stored XSS in the Telephone field of the admin interface...

CVE-2018-12992

An issue was discovered CMS MaeloStore V.1.5.0. There is stored XSS in the Telephone field of the admin interface...

CVE-2018-12992: Improper Neutralization of Input During Web Page Generation

An issue was discovered CMS MaeloStore V.1.5.0. There is stored XSS in the Telephone field of the admin interface...

PT-2018-11521

Name of the Vulnerable Software and Affected Versions CMS MaeloStore version 1.5.0 Description An issue was discovered in the admin interface of CMS MaeloStore, where there is a stored XSS in the Telephone field. Recommendations For CMS MaeloStore version 1.5.0, consider restricting access to the...