23 matches found
CVE-2023-45878
Gibbon CMS CVE-2023-45878 Exploit This Python script exploits CVE-2023-45878, an unauthenticated arbitrary file upload vulnerability in Gibbon CMS versions 25.0.1 and before, leading to Remote Code Execution RCE. Vulnerability Description CVE-2023-45878 exists in the rubricsvisualisesaveAjax.php...
CVE-2022-23871
Multiple cross-site scripting XSS vulnerabilities in the component outcomesaddProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters...
EUVD-2022-28796
Malicious code in bioql PyPI...
EUVD-2022-28005
Malicious code in bioql PyPI...
CVE-2025-26211
Gibbon before 29.0.00 allows CSRF...
CVE-2022-22868
Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting XSS vulnerability, that allows attackers to inject arbitrary script via name parameters...
Exploit for Out-of-bounds Write in Gibbonedu Gibbon
Gibbon CMS CVE-2023-45878 Exploit This Python script exploi...
CVE-2022-23871
Multiple cross-site scripting XSS vulnerabilities in the component outcomesaddProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the component outcomesaddProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters...
CVE-2022-23871
CVE-2022-23871 affects Gibbon CMS v22.0.01, with XSS in the outcomes_addProcess.php component. The root cause is insufficient validation of client-supplied input in the name, category, and description fields, enabling attackers to inject arbitrary web scripts or HTML in a user’s browser. Multiple...
CVE-2022-23871
Multiple cross-site scripting XSS vulnerabilities in the component outcomesaddProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters...
CVE-2022-23871
Multiple cross-site scripting XSS vulnerabilities in the component outcomesaddProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters...
CVE-2022-23871
Multiple cross-site scripting XSS vulnerabilities in the component outcomesaddProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters...
CVE-2022-23871: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the component outcomesaddProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters...
PT-2022-16303
Name of the Vulnerable Software and Affected Versions Gibbon CMS version 22.0.01 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the name, category, description parameters in the component outcomes addProcess.php. This enables th...
CVE-2022-22868
Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting XSS vulnerability, that allows attackers to inject arbitrary script via name parameters...
Cross site scripting
Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting XSS vulnerability, that allows attackers to inject arbitrary script via name parameters...
CVE-2022-22868
Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting XSS vulnerability, that allows attackers to inject arbitrary script via name parameters...