17 matches found
EUVD-2016-2274
Malware in sbrugna...
EUVD-2016-2273
Malware in sbrugna...
Casebook plugin cross-site scripting vulnerability
Casebook plugin for baserCMS is a casebook plugin for baserCMS. A cross-site scripting vulnerability exists in Casebook plugin for baserCMS versions prior to 0.9.4, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Casebook plugin cross-site request forgery vulnerability
Casebook plugin for baserCMS is a casebook plugin for baserCMS. A cross-site request forgery vulnerability exists in Casebook plugin for baserCMS versions prior to 0.9.4, which allows remote attackers to hijack administrars authentication...
CVE-2016-1170
Cross-site request forgery CSRF vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to hijack the authentication of administrators...
CVE-2016-1170
Cross-site request forgery CSRF vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to hijack the authentication of administrators...
CVE-2016-1169
Cross-site scripting XSS vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-1169
Cross-site scripting XSS vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to hijack the authentication of administrators...
CVE-2016-1169
CVE-2016-1169 is a cross-site scripting (XSS) vulnerability in the Casebook plugin for baserCMS, affecting versions prior to 0.9.4. The connected sources (CNVD/JVN/NVD) confirm an XSS flaw that allows remote attackers to inject arbitrary script or HTML via unspecified vectors. Impact is described...
CVE-2016-1170
Cross-site request forgery CSRF vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to hijack the authentication of administrators...
CVE-2016-1169
Cross-site scripting XSS vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-1170
The CVE-2016-1170 entry describes a Cross-site request forgery (CSRF) vulnerability in the Casebook plugin for baserCMS, affecting versions prior to 0.9.4. Root cause: CSRF in the Casebook plugin allows remote attackers to hijack administrator authentication. Impact: arbitrary administrator actio...
baserCMS plugin "Casebook Plugin" vulnerable to cross-site request forgery
Overview baserCMS plugin "Casebook Plugin" contains a cross-site request forgery vulnerability CWE-352. Takaesu Isao of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A...
baserCMS plugin "Casebook Plugin" vulnerable to cross-site scripting
Overview baserCMS plugin "Casebook Plugin" contains a cross-site scripting vulnerability CWE-79. Takaesu Isao of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...
JVN#55801246: baserCMS plugin "Casebook Plugin" multiple vulnerabilities
baserCMS plugin "Casebook Plugin" contains multiple vulnerabilities: Cross-site scripting CWE-79 - CVE-2016-1169 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2| AV:N/AC:L/Au:S/C:N/I:P/A:N| Base Score: 4.0 Cross-site request forger...