174 matches found
Gophish Cross-Site Scripting Vulnerability (CNVD-2020-59719)
Gophish is a powerful open source phishing framework. A cross-site scripting vulnerability exists in Gophish versions prior to 0.11.0. An attacker can exploit this vulnerability by sending the "host" field on a configuration form to conduct cross-site scripting attacks...
Gophish denial of service vulnerability
Gophish is a powerful open source phishing framework. A denial of service vulnerability exists in the "Reset" button on the "Account Settings" page in Gophish versions prior to 0.11.0. This vulnerability can be exploited to cause a denial of service via a clickjacking attack...
Gophish Cross-Site Scripting Vulnerability (CNVD-2020-59720)
Gophish is a powerful open source phishing framework. A cross-site scripting vulnerability exists in Gophish 0.10.1 and earlier versions. An attacker can exploit this vulnerability through a specially crafted landing page or email template to conduct cross-site scripting attacks...
Gophish cookie non-expiration vulnerability
Gophish is a powerful open source phishing framework. A cookie non-expiration vulnerability exists in Gophish 0.10.1 and earlier versions. The vulnerability stems from Gophish not invalidating the gophish cookie after logging out. No details of the vulnerability are provided at this time...
Gophish CSV Injection Vulnerability
Gophish is a powerful open source phishing framework. A CSV injection vulnerability exists in Gophish versions prior to 0.11.0. No detailed vulnerability details are provided at this time...
Gophish Server-Side Cross-Site Request Forgery Vulnerability
Gophish is a powerful open source phishing framework. A server-side cross-site request forgery vulnerability exists in Gophish versions prior to 0.11.0. No detailed vulnerability details are provided at this time...
Gophish Cross-Site Scripting Vulnerability
Gophish is a powerful open source phishing framework. A cross-site scripting vulnerability exists in Gophish versions prior to 0.11.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the "IMAP Host" field on the account settings page...
CVE-2020-24707
Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content...
CVE-2020-24711
The Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers to cause a denial of service via a clickjacking attack...
CVE-2020-24713
Gophish through 0.10.1 does not invalidate the gophish cookie upon logout...
CVE-2020-24708
Cross Site Scripting XSS vulnerability in Gophish before 0.11.0 via the Host field on the send profile form...
CVE-2020-24709
Cross Site Scripting XSS vulnerability in Gophish through 0.10.1 via a crafted landing page or email template...
CVE-2020-24707
Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content...
CVE-2020-24709
Cross Site Scripting XSS vulnerability in Gophish through 0.10.1 via a crafted landing page or email template...
CVE-2020-24712
Cross Site Scripting XSS vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page...
CVE-2020-24712
Cross Site Scripting XSS vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page...
CVE-2020-24708
Cross Site Scripting XSS vulnerability in Gophish before 0.11.0 via the Host field on the send profile form...
CVE-2020-24710
Gophish before 0.11.0 allows SSRF attacks...