2320 matches found
CVE-2018-16637
Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI...
CVE-2018-16637
Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI...
CVE-2018-16638
Evolution CMS 1.4.x allows XSS via the manager/ search parameter...
Cross site scripting
Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI...
Design/Logic Flaw
Evolution CMS 1.4.x allows XSS via the manager/ search parameter...
CVE-2018-16638
Evolution CMS 1.4.x is affected by a Cross‑Site Scripting (XSS) vulnerability in the manager/ search parameter. The CVE-2018-16638 entry documents an XSS flaw that can be triggered via the manager/ URL parameter, with the affected product specified as Evolution CMS 1.4.x. The provided connected d...
CVE-2018-16638
Evolution CMS 1.4.x allows XSS via the manager/ search parameter...
CVE-2018-16637
Evolution CMS 1.4.x is affected by a stored cross-site scripting (XSS) vulnerability that can be triggered via the page weblink title parameter to the manager/ URI. The issue is documented as XSS (including advisories noting versions prior to 1.4.6 are affected). Remediation per the linked adviso...
CVE-2018-16637
Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI...
CVE-2018-1000889
Logisim Evolution version 2.14.3 and earlier contains an XML External Entity XXE vulnerability in Circuit file loading functionality loadXmlFrom in src/com/cburch/logisim/file/XmlReader.java that can result in information leak, possible RCE depending on system configuration. This attack appears t...
CVE-2018-1000889
Logisim Evolution version 2.14.3 and earlier contains an XML External Entity XXE vulnerability in Circuit file loading functionality loadXmlFrom in src/com/cburch/logisim/file/XmlReader.java that can result in information leak, possible RCE depending on system configuration. This attack appears t...
Xxe
Logisim Evolution version 2.14.3 and earlier contains an XML External Entity XXE vulnerability in Circuit file loading functionality loadXmlFrom in src/com/cburch/logisim/file/XmlReader.java that can result in information leak, possible RCE depending on system configuration. This attack appears t...
PT-2018-13664
Name of the Vulnerable Software and Affected Versions Evolution CMS versions 1.4.0 through 1.4.5 Description The issue allows for XSS via the page weblink title parameter to the "manager/" URI. This can be exploited to execute malicious scripts. Recommendations For Evolution CMS versions 1.4.0...
Logisim Evolution XML External Entity Injection Vulnerability
Logisim Evolution is a tool for designing and simulating data logic circuits. An XML external entity injection vulnerability exists in the Circuit file loading feature in Logisim Evolution 2.14.3 and earlier versions, which can be exploited by an attacker to disclose information and potentially...
PT-2018-13665
Name of the Vulnerable Software and Affected Versions Evolution CMS versions 1.4.0 through 1.4.5 Description The issue allows for XSS via the manager/ API endpoint, specifically through the search parameter. This can potentially lead to malicious script execution. Recommendations For Evolution CM...
CVE-2018-16638: Improper Neutralization of Input During Web Page Generation
Evolution CMS 1.4.x allows XSS via the manager/ search parameter...
CVE-2018-16637: Improper Neutralization of Input During Web Page Generation
Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI...
CVE-2018-1000889
CVE-2018-1000889 affects Logisim Evolution versions 2.14.3 and earlier, due to an XML External Entity (XXE) vulnerability in the circuit file loading path (loadXmlFrom in XmlReader.java). The issue can lead to information disclosure and, depending on system configuration, potential remote code ex...
CVE-2018-1000889
Logisim Evolution version 2.14.3 and earlier contains an XML External Entity XXE vulnerability in Circuit file loading functionality loadXmlFrom in src/com/cburch/logisim/file/XmlReader.java that can result in information leak, possible RCE depending on system configuration. This attack appears t...
CVE-2018-1000889
Logisim Evolution version 2.14.3 and earlier contains an XML External Entity XXE vulnerability in Circuit file loading functionality loadXmlFrom in src/com/cburch/logisim/file/XmlReader.java that can result in information leak, possible RCE depending on system configuration. This attack appears t...