99 matches found
CVE-2018-13106
ClipperCMS 1.3.3 is affected by a stored XSS vulnerability in the manager/ Tools → Configuration screen (via the manager/ URI). The issue originates from input that is stored and later rendered unsafely. No remediation or patch details are provided in the connected sources; the CVE entry document...
CVE-2018-13106: Improper Neutralization of Input During Web Page Generation
ClipperCMS 1.3.3 has stored XSS via the "Tools - Configuration" screen of the manager/ URI...
Session fixation
ClipperCMS 1.3.3 allows Session Fixation...
Design/Logic Flaw
ClipperCMS 1.3.3 has XSS in the "Module name" field in a "Modules - Manage modules - edit" action to the manager/ URI...
CVE-2018-11571
ClipperCMS 1.3.3 allows Session Fixation...
CVE-2018-11572
ClipperCMS 1.3.3 has XSS in the "Module name" field in a "Modules - Manage modules - edit" action to the manager/ URI...
CVE-2018-11571
ClipperCMS 1.3.3 allows Session Fixation...
CVE-2018-11572
ClipperCMS 1.3.3 has XSS in the "Module name" field in a "Modules - Manage modules - edit" action to the manager/ URI...
CVE-2018-11572
ClipperCMS 1.3.3 has an XSS vulnerability in the Module name field accessed via Modules → Manage modules → edit (manager/ URI). The issue allows injection of arbitrary web script or HTML (remote exploitation). Root cause: improper sanitization of the module name input. Impact: potential script ex...
CVE-2018-11571
CVE-2018-11571 affects ClipperCMS 1.3.3 and is described as a Session Fixation vulnerability. The connected documents confirm the affected product and vulnerability type but do not provide concrete technical details such as vulnerable components, root cause specifics, exploit vectors, affected ve...
ClipperCMS Session Fixation Vulnerability
ClipperCMS is a content management system CMS. A security vulnerability exists in ClipperCMS version 1.3.3. An attacker can exploit the vulnerability to allow a user to use a pre-existing session ID or hijack a user session...
CVE-2018-11572: Improper Neutralization of Input During Web Page Generation
ClipperCMS 1.3.3 has XSS in the "Module name" field in a "Modules - Manage modules - edit" action to the manager/ URI...
ClipperCMS Cross-Site Scripting Vulnerability (CNVD-2018-10866)
ClipperCMS is a content management system CMS. A cross-site scripting vulnerability exists in the 'Module name' field under the 'Modules - Manage modules - edit' tag in ClipperCMS version 1.3.3. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
CVE-2018-11571
ClipperCMS 1.3.3 allows Session Fixation...
CVE-2018-11572
ClipperCMS 1.3.3 has XSS in the "Module name" field in a "Modules - Manage modules - edit" action to the manager/ URI...
CVE-2018-11571: Session Fixation
ClipperCMS 1.3.3 allows Session Fixation...
ClipperCMS 1.3.3 - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: ClipperCMS 1.3.3 Persistent XSS on 'Site name' field Exploit Author: Nathu Nandwani Website: http://nandtech.co/ Vendor Homepage: http://www.clippercms.com/ Software Link:...
Clipper CMS 1.3.3 Cross Site Scripting
Exploit Title: ClipperCMS 1.3.3 Persistent XSS on 'Site name' field Date: 05/27/2018 Exploit Author: Nathu Nandwani Website: http://nandtech.co/ Vendor Homepage: http://www.clippercms.com/ Software Link: https://github.com/ClipperCMS/ClipperCMS/releases/tag/clipper1.3.3 Version: 1.3.3 Tested on:...
ClipperCMS 1.3.3 - Cross-Site Scripting
Exploit Title: ClipperCMS 1.3.3 Persistent XSS on 'Site name' field Date: 05/27/2018 Exploit Author: Nathu Nandwani Website: http://nandtech.co/ Vendor Homepage: http://www.clippercms.com/ Software Link: https://github.com/ClipperCMS/ClipperCMS/releases/tag/clipper1.3.3 Version: 1.3.3 Tested on:...
ClipperCMS 1.3.3 - Cross-Site Scripting
ClipperCMS 1.3.3 - Cross-Site Scripting Exploit Title: ClipperCMS 1.3.3 Persistent XSS on 'Site name' field Date: 05/27/2018 Exploit Author: Nathu Nandwani Website: http://nandtech.co/ Vendor Homepage: http://www.clippercms.com/ Software Link:...