17 matches found
CVE-2025-56514
CVE-2025-56514: Fiora 채팅 애플리케이션의 교차 사이트 스크립팅XSS 취약점 개요 CVE-2025-56514 로 식별된 교차 사이트 스크립팅XSS 취약점이 Fiora 채팅 애플리케이션 버전 1.0.0에 영향을 미칩니다. 이 취약점은 인증된 사용자가 그룹 아바타 변경 기능을 통해 악성 SVG 파일을 업로드하여 다른 사용자의 브라우저 컨텍스트에서 임의의 JavaScript를 실행할 수 있도록 합니다. 취약점 세부 정보 취약점 유형 : 교차 사이트 스크립팅XSS 공격 유형 : 원격 영향 : 코드 실행 영향을 받는 제...
EUVD-2022-3605
Malicious code in bioql PyPI...
📄 Fiora Chat 1.0.0 Cross Site Scripting
Fiora Chat version 1.0.0 suffers from a cross site scripting vulnerability. CVE-2025-56514: Cross Site Scripting XSS Vulnerability in Fiora Chat Application Overview A Cross Site Scripting XSS vulnerability, identified as CVE-2025-56514, affects the Fiora chat application version 1.0.0. This...
CVE-2020-5501
phpBB 3.2.8 allows a CSRF attack that can modify a group avatar...
BIT-PHPBB-2020-5501
phpBB 3.2.8 allows a CSRF attack that can modify a group avatar...
GHSA-CPQC-G4R8-6HXG phpBB Cross-Site Request Forgery (CSRF)
phpBB 3.2.8 allows a CSRF attack that can modify a group avatar...
phpBB Cross-Site Request Forgery (CSRF)
phpBB 3.2.8 allows a CSRF attack that can modify a group avatar...
phpBB cross-site request forgery vulnerability (CNVD-2020-03224)
phpBB is a set of open source and PHP-based Web forum software . The software has support for multiple languages , multiple databases and customized layout and so on. A cross-site request forgery vulnerability exists in phpBB. An attacker can use this vulnerability to modify the group avatar...
CVE-2020-5501
phpBB 3.2.8 allows a CSRF attack that can modify a group avatar...
CVE-2020-5501
phpBB 3.2.8 allows a CSRF attack that can modify a group avatar...
Cross site request forgery (csrf)
phpBB 3.2.8 allows a CSRF attack that can modify a group avatar...
CVE-2020-5501
phpBB 3.2.8 allows a CSRF attack that can modify a group avatar...
CVE-2020-5501
phpBB 3.2.8 allows a CSRF attack that can modify a group avatar...
CVE-2020-5501
phpBB 3.2.8 allows a CSRF attack that can modify a group avatar...
PT-2020-18482 · Phpbb Limited · Phpbb
Name of the Vulnerable Software and Affected Versions: phpBB version 3.2.8 Description: The issue allows for a CSRF attack, which can be used to modify a group avatar. Recommendations: For phpBB version 3.2.8, update to a newer version that contains a fix for this issue...
CVE-2020-5501: Cross-Site Request Forgery (CSRF)
phpBB 3.2.8 allows a CSRF attack that can modify a group avatar...
GitLab: GitHub import allows user to create child group under existing namespace
When importing a GitHub repository on GitLab, a request is made to /import/github. The user is allowed to pass along a target namespace where they want to add the repository. In this process, the code will create the namespace if it doesn't exist already. However, this can be used to create a...