92 matches found
Cross site scripting
An issue was discovered in Hoosk CMS v1.8.0. There is a XSS vulnerability in install/index.php...
Remote code execution
An issue was discovered in Hoosk CmS v1.8.0. There is an Remote Code Execution vulnerability in install/index.php...
CVE-2020-26043
An issue was discovered in Hoosk CMS v1.8.0. There is a XSS vulnerability in install/index.php...
CVE-2020-26043
CVE-2020-26043 is a reported XSS in Hoosk CMS v1.8.0, specifically in install/index.php. The connected sources confirm a cross-site scripting vulnerability, with the Red Hat/OSV entries and PRION advisories reiterating the same issue. The available documents do not provide technical details about...
CVE-2020-26042
An issue was discovered in Hoosk CMS v1.8.0. There is a SQL injection vulnerability in install/index.php...
CVE-2020-26042
CVE-2020-26042 affects Hoosk CMS v1.8.0 with a SQL injection vulnerability in install/index.php. Per the connected NVD record, the issue yields partial confidentiality, partial integrity, and partial availability impacts (CVSS v2 base 7.5, HIGH; CVSS v3.1 base 9.8, CRITICAL). Exploitation details...
CVE-2020-26041
An issue was discovered in Hoosk CmS v1.8.0. There is an Remote Code Execution vulnerability in install/index.php...
CVE-2020-26041
CVE-2020-26041 concerns Hoosk CMS v1.8.0, with a reported remote code execution in install/index.php. Public sources in the connected documents describe the vulnerability as an RCE in the installer, enabling execution of arbitrary code on affected systems. The CVSS metrics shown (CVSSv3.1 base sc...
Hoosk Cross-Site Request Forgery Vulnerability (CNVD-2020-50116)
Hoosk is a lightweight, user-centered, CodeIgniter-built content management system CMS that can be used to easily create stylish, responsive websites. A cross-site request forgery vulnerability exists in Hoosk versions prior to 1.7.2. An attacker could exploit this vulnerability to delete account...
CVE-2020-16610
Hoosk Codeigniter CMS before 1.7.2 is affected by a Cross Site Request Forgery CSRF. When an attacker induces authenticated admin user to a malicious web page, any accounts can be deleted without admin user's intention...
CVE-2020-16610
Hoosk Codeigniter CMS before 1.7.2 is affected by a Cross Site Request Forgery CSRF. When an attacker induces authenticated admin user to a malicious web page, any accounts can be deleted without admin user's intention...
Cross site request forgery (csrf)
Hoosk Codeigniter CMS before 1.7.2 is affected by a Cross Site Request Forgery CSRF. When an attacker induces authenticated admin user to a malicious web page, any accounts can be deleted without admin user's intention...
CVE-2020-16610
CVE-2020-16610 affects Hoosk CMS (CodeIgniter-based) prior to version 1.7.2. A CSRF flaw allows an attacker to induce an authenticated admin to visit a malicious page, resulting in accounts being deleted without the admin’s consent. CVSS v3.1 base score 4.3 (Medium); attack vector: Network; privi...
CVE-2020-16610
Hoosk Codeigniter CMS before 1.7.2 is affected by a Cross Site Request Forgery CSRF. When an attacker induces authenticated admin user to a malicious web page, any accounts can be deleted without admin user's intention...
CVE-2018-16771
Hoosk v1.7.0 allows PHP code execution via a SiteUrl that is provided during installation and mishandled in config.php...
CVE-2018-16771
Hoosk v1.7.0 allows PHP code execution via a SiteUrl that is provided during installation and mishandled in config.php...
CVE-2018-16772
Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new...
CVE-2018-16772
Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new...