8759 matches found
Tiki Calendar HTML Injection Vulnerability
Tiki is a suite of open source content management and portal applications from the Tiki software community that can be used to create web applications, portals, intranets, extranets, etc. Calendar is one of the calendar components. A cross-site scripting vulnerability exists in the Calendar...
smtd.umich.edu XSS vulnerability
Open Bug Bounty ID: OBB-568718 Description| Value ---|--- Affected Website:| smtd.umich.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure base...
Tiki Wiki CMS Groupware Multiple Vulnerabilities (Feb 2018)
Tiki Wiki CMS Groupware is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2018-7303
The Calendar component in Tiki 17.1 allows HTML injection...
CVE-2018-7303
The Calendar component in Tiki 17.1 allows HTML injection...
Design/Logic Flaw
The Calendar component in Tiki 17.1 allows HTML injection...
CVE-2018-7303
The Calendar component in Tiki 17.1 allows HTML injection...
CVE-2018-7303
CVE-2018-7303 concerns the Calendar component in Tiki 17.1, where HTML input from users is not properly filtered, enabling HTML injection. The primary documented impact is cross-site scripting risk via the Calendar module. The CVSS details indicate network access with low to moderate complexity a...
traconline.com XSS vulnerability
Open Bug Bounty ID: OBB-550136 Description| Value ---|--- Affected Website:| traconline.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
napili.com XSS vulnerability
Open Bug Bounty ID: OBB-550104 Description| Value ---|--- Affected Website:| napili.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Visual Calendar SQL Injection Vulnerability in Joomla!
Joomla! is the U.S. Open Source Matters team using PHP and MySQL development of a set of open source , cross-platform content management system CMS. Visual Calendar is one of the visual calendar plug-in . A SQL injection vulnerability exists in Joomla! Visual Calendar version 3.1.3. A remote...
CP Event Calendar SQL Injection Vulnerability in Joomla!
Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. CP Event Calendar is one of the event calendar plugin . A SQL injection vulnerability exists in Joomla! CP Event Calendar version 3.0.1. A remote...
Picture Calendar Catalog Traversal Vulnerability in Joomla!
Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development of open source , cross-platform content management system CMS. Picture Calendar is one of the calendar image selection plug-in . A directory traversal vulnerability exists in Joomla! Picture Calendar version 3.1.4...
CVE-2018-6395
SQL Injection exists in the Visual Calendar 3.1.3 component for Joomla! via the id parameter in a view=load action...
CVE-2018-6397
Directory Traversal exists in the Picture Calendar 3.1.4 component for Joomla! via the list.php folder parameter...
CVE-2018-6398
SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action...
CVE-2018-6398
SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action...
Directory traversal
Directory Traversal exists in the Picture Calendar 3.1.4 component for Joomla! via the list.php folder parameter...