Design/Logic Flaw

HumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts existing on any Social Network Kits including self-hosted ones by brute-forcing the username after the /u/ initial URI substring, aka Response Discrepancy Information Exposure...

CVE-2019-12743

CVE-2019-12743 affects HumHub Social Network Kit Enterprise v1.3.13. The issue is an information disclosure: an attacker can enumerate existing user accounts by brute-forcing usernames after the /u/ URI substring (Response Discrepancy Information Exposure). Exploitation is remote over the network...

CVE-2019-12743

HumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts existing on any Social Network Kits including self-hosted ones by brute-forcing the username after the /u/ initial URI substring, aka Response Discrepancy Information Exposure...

Humhub Directory Traversal Vulnerability

HumHub is a free and open source social networking software , written on the Yii PHP framework , provides an easy-to-use toolkit for creating and launching your own social network . Humhub suffers from a directory traversal vulnerability. An attacker can exploit the vulnerability to obtain...

Cross-Site Scripting (XSS)

lartak/humhub is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser via a /protected/vendor/codeception/codeception/tests/data/app/view/index.php POST request...

Cross site scripting

A cross-site scripting XSS vulnerability in HumHub 1.3.12 allows remote attackers to inject arbitrary web script or HTML via a /protected/vendor/codeception/codeception/tests/data/app/view/index.php POST request...

CVE-2019-11564

A cross-site scripting XSS vulnerability in HumHub 1.3.12 allows remote attackers to inject arbitrary web script or HTML via a /protected/vendor/codeception/codeception/tests/data/app/view/index.php POST request...

CVE-2019-11564

A cross-site scripting XSS vulnerability in HumHub 1.3.12 allows remote attackers to inject arbitrary web script or HTML via a /protected/vendor/codeception/codeception/tests/data/app/view/index.php POST request...

CVE-2019-11564

HumHub 1.3.12 contains a stored/reflected XSS vulnerability reachable via a POST to /protected/vendor/codeception/codeception/tests/data/app/view/index.php. The CVE-2019-11564 entry is corroborated across multiple sources (NVD, Red Hat, CVE list) with consistent description of an attacker injecti...

CVE-2019-11564

A cross-site scripting XSS vulnerability in HumHub 1.3.12 allows remote attackers to inject arbitrary web script or HTML via a /protected/vendor/codeception/codeception/tests/data/app/view/index.php POST request...

HumHub Cross-Site Scripting Vulnerability (CNVD-2019-13252)

Humhub is an open source PHP-based social networking system. A cross-site scripting vulnerability exists in HumHub version 1.3.12, which can be exploited by an attacker to inject arbitrary Web script or HTML...

HumHub 1.3.12 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: HumHub 1.3.12 - Cross-Site Scripting Exploit Author: Kağan EĞLENCE Vendor Homepage: https://humhub.org/ Version: 1.3.12 CVE : CVE-2019-11564 Url :...

HumHub 1.3.12 Cross Site Scripting

Exploit Title: HumHub 1.3.12 - Cross-Site Scripting Exploit Author: Kağan EĞLENCE Vendor Homepage: https://humhub.org/ Version: 1.3.12 CVE : CVE-2019-11564 Url : http://localhost/humhub-1.3.12/protected/vendor/codeception/codeception/tests/data/app/view/index.php Vulnerable File :...

HumHub 1.3.12 - Cross-Site Scripting

Exploit Title: HumHub 1.3.12 - Cross-Site Scripting Exploit Author: Kağan EĞLENCE Vendor Homepage: https://humhub.org/ Version: 1.3.12 CVE : CVE-2019-11564 Url : http://localhost/humhub-1.3.12/protected/vendor/codeception/codeception/tests/data/app/view/index.php Vulnerable File :...

HumHub 1.3.12 - Cross-Site Scripting

HumHub 1.3.12 - Cross-Site Scripting Exploit Title: HumHub 1.3.12 - Cross-Site Scripting Exploit Author: Kağan EĞLENCE Vendor Homepage: https://humhub.org/ Version: 1.3.12 CVE : CVE-2019-11564 Url :...

Humhub cross-site scripting vulnerability (CNVD-2019-12168)

Humhub is a set of open source social networking software based on the Yii PHP framework written . A cross-site scripting vulnerability exists in /s/adada/cfiles/upload in Humhub community version version 1.3.10. A remote attacker can exploit this vulnerability to inject arbitrary web script or...

Humhub cross-site scripting vulnerability (CNVD-2019-12169)

Humhub is a set of open source social networking software based on the Yii PHP framework written . A cross-site scripting vulnerability exists in file/file/upload in version 1.3.10 of Humhub Community Edition. A remote attacker can use the 'filename' parameter to inject arbitrary web script or HT...

CVE-2019-9093

A Reflected Cross Site Scripting XSS Vulnerability was discovered in file/file/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing a JavaScript payload in the filename parameter is echoed back, which resulted in reflected XSS...

CVE-2019-9094

A Reflected Cross Site Scripting XSS Vulnerability was discovered in /s/adada/cfiles/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing JavaScript in the filename is echoed back in JavaScript code, which resulted in XSS...

CVE-2019-9093

A Reflected Cross Site Scripting XSS Vulnerability was discovered in file/file/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing a JavaScript payload in the filename parameter is echoed back, which resulted in reflected XSS...