EUVD-2013-6682

Malware in sbrugna...

EUVD-2018-9531

Malware in sbrugna...

Malicious code in flashcanvas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a7c1d4db3a33aaeb6b2b80bf058332cdd082406999470a56960c36f28ad99d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in flashcanvas

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3620 Malicious code in flashcanvas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a7c1d4db3a33aaeb6b2b80bf058332cdd082406999470a56960c36f28ad99d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2013-6880

Open redirect in proxy.php in FlashCanvas before 1.6 allows remote attackers to redirect users to arbitrary web sites and conduct cross-site scripting XSS attacks via the HTTP Referer header...

Cross site scripting

Open redirect in proxy.php in FlashCanvas before 1.6 allows remote attackers to redirect users to arbitrary web sites and conduct cross-site scripting XSS attacks via the HTTP Referer header...

CVE-2013-6880

CVE-2013-6880 is an open redirect vulnerability in FlashCanvas’s proxy.php (versions prior to 1.6) that can redirect users to arbitrary sites and enable XSS via the Referer header. Affected: FlashCanvas 1.5 and possibly older; fix: upgrade to FlashCanvas 1.6 or later. The issue status is active i...

CVE-2013-6880

Open redirect in proxy.php in FlashCanvas before 1.6 allows remote attackers to redirect users to arbitrary web sites and conduct cross-site scripting XSS attacks via the HTTP Referer header...

PT-2019-7002

Name of the Vulnerable Software and Affected Versions FlashCanvas versions prior to 1.6 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct cross-site scripting XSS attacks via the HTTP Referer header. This is due to an open redirect in the proxy.php...

CVE-2013-6880: Improper Neutralization of Input During Web Page Generation

Open redirect in proxy.php in FlashCanvas before 1.6 allows remote attackers to redirect users to arbitrary web sites and conduct cross-site scripting XSS attacks via the HTTP Referer header...

OpenEMR Cross-Site Scripting Vulnerability (CNVD-2019-14077)

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security vulnerability exists in the flashcanvas.swf file in versions of OpenEMR...

SugarCRM Community Edition Cross-Site Scripting Vulnerability

SugarCRM Community Edition is an open source Customer Relationship Management CRM system from SugarCRM USA. The system supports differentiated marketing for different customer needs, managing and distributing sales leads, and enabling information sharing and tracking of sales representatives. A...

SugarCRM 6.5.26 - Cross-Site Scripting

SugarCRM 6.5.26 - Cross-Site Scripting Exploit Title: SugarCRM 6.5.26 - Cross-Site Scripting Date: 2018-09-29 Exploit Author: Purplemet Security Author Website: https://www.purplemet.com/ Vendor Homepage: https://www.sugarcrm.com/ Software Link: https://sourceforge.net/projects/sugarcrm/ Version:...

SugarCRM 6.5.26 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: SugarCRM 6.5.26 - Cross-Site Scripting Exploit Author: Purplemet Security Author Website: https://www.purplemet.com/ Vendor Homepage: https://www.sugarcrm.com/ Software Link: https://sourceforge.net/projects/sugarcrm/ Version:...

CVE-2018-17784

Multiple vulnerabilities in YUI and FlashCanvas embedded in SugarCRM Community Edition 6.5.26 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack on a targeted system...

CVE-2018-17784

Multiple vulnerabilities in YUI and FlashCanvas embedded in SugarCRM Community Edition 6.5.26 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack on a targeted system...

Cross site scripting

Multiple vulnerabilities in YUI and FlashCanvas embedded in SugarCRM Community Edition 6.5.26 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack on a targeted system...

CVE-2018-17784

CVE-2018-17784: SugarCRM Community Edition 6.5.26 contains multiple XSS vulnerabilities in YUI/FlashCanvas, via components such as uploader.swf, io.swf and flashcanvas.swf. An unauthenticated, remote attacker can inject arbitrary web scripts on a target system. Evidence across sources confirms th...

PT-2018-14195

Name of the Vulnerable Software and Affected Versions SugarCRM Community Edition version 6.5.26 Description The issue allows an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack on a targeted system due to multiple vulnerabilities in YUI and FlashCanvas embedded in the...