Cross site scripting

Multiple Cross-Site Scripting XSS vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbitrary web script or HTML via the rpath parameter...

CVE-2022-27258

CVE-2022-27258 corresponds to multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla up to version 7.0.3. The issue arises from the rpath parameter, enabling a remote attacker to include arbitrary web script or HTML. Affected product: Hubzilla (core) prior to 7.0.3. Root cause details ar...

CVE-2022-27258

Multiple Cross-Site Scripting XSS vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbitrary web script or HTML via the rpath parameter...

PT-2022-18334 · Hubzilla · Hubzilla

Name of the Vulnerable Software and Affected Versions: Hubzilla versions prior to 7.2 Description: A PHP Local File Inclusion issue in the default Redbasic theme allows remote attackers to include arbitrary php files via the schema parameter. Recommendations: For versions prior to 7.2, update to...

Hubzilla 跨站脚本漏洞

Hubzilla is a powerful open source platform for creating interconnected websites with a decentralized identity, communication, and permissions framework built using common web server technologies. A cross-site scripting vulnerability exists in Hubzilla 7.0.3 and earlier versions, which can be...

Hubzilla 安全漏洞

Hubzilla is an open source platform for creating interconnected websites with a decentralized identity, communications and permissions framework built using common web server technology.Hubzilla version 7.2 previously contained a security vulnerability that could be exploited by remote attackers ...

CVE-2022-27256

A PHP Local File inclusion vulnerability in the Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter...

CVE-2022-27256

A PHP Local File inclusion vulnerability in the Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter...

CVE-2022-27256

A PHP Local File inclusion vulnerability in the Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter...

Arbitrary file deletion

A PHP Local File inclusion vulnerability in the Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter...

CVE-2022-27256

CVE-2022-27256 describes a PHP Local File Inclusion vulnerability in the Redbasic theme for Hubzilla prior to version 7.2 . The flaw allows remote attackers to include arbitrary PHP files through the schema parameter, enabling potentially unauthorized code execution on affected installations. The...

CVE-2022-27256

A PHP Local File inclusion vulnerability in the Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter...

Hubzilla 输入验证错误漏洞

Hubzilla is a powerful open source platform for creating interconnected websites with a decentralized identity, communication and permissions framework built using common web server technologies. A security vulnerability exists in Hubzilla versions prior to 7.2, which stems from a PHP local file...

demo.hubzilla.org XSS vulnerability

Open Bug Bounty ID: OBB-697984 Description| Value ---|--- Affected Website:| demo.hubzilla.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...