87 matches found
CVE-2018-19546
JTBCPHP 3.0.1.7 has CSRF via the console/xml/manage.php?type=action&action=edit URI, as demonstrated by an XSS payload in the content parameter...
CVE-2018-19546
JTBC(PHP) 3.0.1.7 is affected by a CSRF vulnerability exploitable through console/xml/manage.php?type=action&action=edit, demonstrated by an XSS payload in the content parameter. The NVD entry assigns CVSSv3.0 base score 8.8 (vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), with network acc...
CVE-2018-19546
JTBCPHP 3.0.1.7 has CSRF via the console/xml/manage.php?type=action&action=edit URI, as demonstrated by an XSS payload in the content parameter...
CVE-2018-19547
JTBCPHP 3.0.1.7 has XSS via the console/xml/manage.php?type=action&action=edit content parameter...
CVE-2018-19547
CVE-2018-19547 affects JTBC(PHP) 3.0.1.7 with a reflected/stored XSS in the console/xml/manage.php?type=action&action=edit content parameter. The root cause is an improper handling of the content parameter in that endpoint, enabling injection of arbitrary JavaScript/HTML. The connected documents ...
JTBC(PHP) Cross-Site Scripting Vulnerability
JTBC PHP is an open source CMS Content Management System. A cross-site scripting vulnerability exists in JTBC PHP version 3.0.1.7. A remote attacker can exploit the vulnerability by sending the 'content' parameter to console/xml/manage.php?type=action&action=edit URL to inject arbitrary Web scrip...
PT-2018-14992
Name of the Vulnerable Software and Affected Versions JTBCPHP version 3.0.1.7 Description The issue is related to a cross-site scripting XSS problem. It occurs via the "console/xml/manage.php" API endpoint, specifically when the type parameter is set to "action" and the action parameter is set to...
PT-2018-14991
Name of the Vulnerable Software and Affected Versions JTBCPHP version 3.0.1.7 Description The issue concerns a CSRF vulnerability that can be exploited via the "console/xml/manage.php?type=action&action=edit" URI. It is demonstrated by an XSS payload in the content parameter. Recommendations For...
CVE-2018-19547: Improper Neutralization of Input During Web Page Generation
JTBCPHP 3.0.1.7 has XSS via the console/xml/manage.php?type=action&action=edit content parameter...
JTBC (PHP) Cross-Site Request Forgery Vulnerability (CNVD-2018-26794)
JTBC PHP is an open source CMS Content Management System. A cross-site request forgery vulnerability exists in JTBC PHP version 3.0.1.7. A remote attacker can exploit this vulnerability to perform unauthorized operations with the help of console/xml/manage.php?type=action&action=edit URI...
CVE-2018-19546: Improper Neutralization of Input During Web Page Generation
JTBCPHP 3.0.1.7 has CSRF via the console/xml/manage.php?type=action&action=edit URI, as demonstrated by an XSS payload in the content parameter...
CVE-2018-19327
An issue was discovered in JTBCPHP 3.0.1.7. aboutus/manage.php?type=action&action=add allows CSRF...
Cross site request forgery (csrf)
An issue was discovered in JTBCPHP 3.0.1.7. aboutus/manage.php?type=action&action=add allows CSRF...
CVE-2018-19327
An issue was discovered in JTBCPHP 3.0.1.7. aboutus/manage.php?type=action&action=add allows CSRF...
CVE-2018-19327
An issue was discovered in JTBCPHP 3.0.1.7. aboutus/manage.php?type=action&action=add allows CSRF...
CVE-2018-19327
Summary: Multiple sources confirm a CSRF vulnerability in JTBC(PHP) 3.0.1.7, specifically in aboutus/manage.php?type=action&action=add. The issue allows unauthorized operations and is described across CVE-2018-19327 records in NVD/CNVD/PRION lists. Affected component: JTBC(PHP) 3.0.1.7, vulnerabl...
CVE-2018-19327: Cross-Site Request Forgery (CSRF)
An issue was discovered in JTBCPHP 3.0.1.7. aboutus/manage.php?type=action&action=add allows CSRF...
PT-2018-14917
Name of the Vulnerable Software and Affected Versions JTBCPHP version 3.0.1.7 Description An issue was discovered that allows CSRF in the "aboutus/manage.php" endpoint, specifically when the "type" parameter is set to "action" and the "action" parameter is set to "add". Recommendations For JTBCPH...