251 matches found
Gophish Cross-Site Scripting Vulnerability (CNVD-2020-59720)
Gophish is a powerful open source phishing framework. A cross-site scripting vulnerability exists in Gophish 0.10.1 and earlier versions. An attacker can exploit this vulnerability through a specially crafted landing page or email template to conduct cross-site scripting attacks...
Gophish CSV Injection Vulnerability
Gophish is a powerful open source phishing framework. A CSV injection vulnerability exists in Gophish versions prior to 0.11.0. No detailed vulnerability details are provided at this time...
Gophish Cross-Site Scripting Vulnerability (CNVD-2020-59719)
Gophish is a powerful open source phishing framework. A cross-site scripting vulnerability exists in Gophish versions prior to 0.11.0. An attacker can exploit this vulnerability by sending the "host" field on a configuration form to conduct cross-site scripting attacks...
CVE-2020-24713
Gophish through 0.10.1 does not invalidate the gophish cookie upon logout...
CVE-2020-24709
Cross Site Scripting XSS vulnerability in Gophish through 0.10.1 via a crafted landing page or email template...
CVE-2020-24708
Cross Site Scripting XSS vulnerability in Gophish before 0.11.0 via the Host field on the send profile form...
CVE-2020-24707
Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content...
CVE-2020-24712
Cross Site Scripting XSS vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page...
CVE-2020-24708
Cross Site Scripting XSS vulnerability in Gophish before 0.11.0 via the Host field on the send profile form...
CVE-2020-24709
Cross Site Scripting XSS vulnerability in Gophish through 0.10.1 via a crafted landing page or email template...
CVE-2020-24712
Cross Site Scripting XSS vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page...
CVE-2020-24707
Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content...
CVE-2020-24710
Gophish before 0.11.0 allows SSRF attacks...
CVE-2020-24711
The Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers to cause a denial of service via a clickjacking attack...
CVE-2020-24713
Gophish through 0.10.1 does not invalidate the gophish cookie upon logout...
CVE-2020-24711
The Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers to cause a denial of service via a clickjacking attack...
CVE-2020-24710
Gophish before 0.11.0 allows SSRF attacks...
Code injection
Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content...