elgg 安全漏洞

Elgg is a set of open source social networking engine. The product blogs, file sharing, groups, and other features. A security vulnerability exists in elgg that stems from elgg's susceptibility to authorization bypass via a user-controlled key...

in elgg/elgg

Hello Elgg Team, hope you are having an awesome day : Just found an issue on the latest version of Elgg, and apparently the previous versions also have the same flaw. Description There is this endpoint, which is: http://elgg-example-here.com/ajax/form/admin/user/changeemail This endpoint is...

in elgg/elgg

Hello there! Hope you're having an awesome day :D Actually, it's been a few months since I found this bug, but I had no success in trying to contact you guys, and now I discovered that you're on Huntr. So now I'm sending my report from here : Summary During this week, I was participating at a bug...

CVE-2019-11016: Open Redirect Vulnerability

Earlier this year the Qualys Web Application Scanning team discovered and reported an open redirect vulnerability CVE-2019-11016 in Elgg, an open source rapid development framework for socially aware web applications, which the Elgg team promptly fixed. Versions of the Elgg framework before 1.12....

Elgg SQL Injection Vulnerability

Elgg is a set of open source social networking engine. The product blog, file sharing, groups and other features. A SQL injection vulnerability exists in Elgg 1.7.10 and earlier versions. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based...

CVE-2011-2935

Elgg through 1.7.10 has XSS...

CVE-2011-2936

Elgg through 1.7.10 has a SQL injection vulnerability...

Cross site scripting

Elgg through 1.7.10 has XSS...

Sql injection

Elgg through 1.7.10 has a SQL injection vulnerability...

CVE-2011-2936

CVE-2011-2936 covers an SQL injection in Elgg up to version 1.7.10 (and earlier). The issue is described across multiple sources as stemming from a lack of validation of externally supplied SQL statements in database-based features, enabling arbitrary SQL commands. Impact details: vulnerability m...

CVE-2011-2936

Elgg through 1.7.10 has a SQL injection vulnerability...

CVE-2011-2935

The CVE-2011-2935 entry documents a Cross-Site Scripting (XSS) vulnerability in Elgg up to version 1.7.10. Multiple connected sources (Red Hat RH CVE, GitHub advisory GHSA-mcfm-j5g6-w26f, OSV, NVD/NVD and CVE listings) corroborate an XSS flaw in this software, with varying descriptions that point...

CVE-2011-2935

Elgg through 1.7.10 has XSS...

Open Redirection

elgg/elgg is vulnerable to open redirection attacks. The vulnerability exists as the values of Referer and $url are not sanitized, allowing an attacker to redirect a victim to a malicious site...

Elgg Input Validation Error Vulnerability

Elgg is a set of open source social networking engine. The product blog, file sharing, groups and other features. An input validation error vulnerability exists in Elgg versions prior to 1.12.18 and 2.3.x prior to 2.3.11, which stems from a network system or product that does not properly validat...

CVE-2019-11016

Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect...

CVE-2019-11016

Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect...

Open redirect

Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect...

CVE-2019-11016

Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect...

CVE-2019-11016

CVE-2019-11016 affects the Elgg framework prior to 1.12.18 and 2.3.x prior to 2.3.11. The vulnerability is an open redirect triggered by unsanitized or misused redirect logic (via the url parameter), enabling attackers to craft links that redirect victims to attacker-controlled sites. Exploitatio...