CVE-2018-16628

CVE-2018-16628 affects Kirby CMS (Kirby v2.5.12) with an XSS vulnerability in the panel/login page exploitable via the blog name. The connected sources consistently describe a cross-site scripting issue without providing exploitation steps, affected versions beyond v2.5.12, or concrete remediatio...

CVE-2018-16628

panel/login in Kirby v2.5.12 allows XSS via a blog name...

Kirby CMS 2.5.12 - Cross-Site Request Forgery (Delete Page)

Exploit Title: Kirby CMS 2.5.12 - Cross-Site Request Forgery Delete Page Date: 2018-07-22 Exploit Author: Zaran Shaikh Version: 2.5.12 CVE: NA Category: Web Application 1. Description The application allows malicious HTTP requests to be sent in order to trick a user into adding/ deleting web page...

Kirby CMS 2.5.12 - Cross-Site Request Forgery (Delete Page)

Kirby CMS 2.5.12 - Cross-Site Request Forgery Delete Page Exploit Title:​​ Kirby CMS 2.5.12 - Cross-Site Request Forgery Delete Page Date: 2018-07-22 Exploit Author: Zaran Shaikh Version: 2.5.12 CVE: NA Category: Web Application 1. Description The application allows malicious HTTP requests to be...

Kirby CMS 2.5.12 - Cross-Site Scripting

Kirby CMS 2.5.12 - Cross-Site Scripting Exploit Title:​​ Kirby CMS 2.5.12 - Cross-Site Scripting Date: 2018-07-22 Exploit Author: Zaran Shaikh Version: ​2.5.12 CVE : ​NA Category: ​Web Application Description The application allows user injected payload which can lead to Stored Cross Site...

Kirby CMS 2.5.12 - Cross-Site Scripting

Exploit Title: Kirby CMS 2.5.12 - Cross-Site Scripting Date: 2018-07-22 Exploit Author: Zaran Shaikh Version: 2.5.12 CVE : NA Category: Web Application Description The application allows user injected payload which can lead to Stored Cross Site Scripting. Proof of Concept 1. Visit the application...

kirby-hunters-z.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-645616 Description| Value ---|--- Affected Website:| kirby-hunters-z.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Kirby Panel Cross-Site Scripting Vulnerability

Kirby is a file-based CMS Content Management System system. panel is one of the control panel components. A cross-site scripting vulnerability exists in Kirby Panel versions prior to 2.3.3, 2.4.x versions prior to 2.4.2 and 2.5.x versions prior to 2.5.7. A remote attacker can exploit this...

Kirby CMS < 2.5.7 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: KirbyCMS 2.5.7 Stored Cross Site Scripting Vendor Homepage: https://getkirby.com/ Software Link: https://getkirby.com/try Discovered by: Ishaq Mohammed Contact: https://twitter.com/securityprince Website:...

Cross site scripting

A cross-site Scripting XSS vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exists when displaying a specially prepared SVG document that has been uploaded as a content file...

CVE-2017-16807

A cross-site Scripting XSS vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exists when displaying a specially prepared SVG document that has been uploaded as a content file...

CVE-2017-16807

A cross-site Scripting XSS vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exists when displaying a specially prepared SVG document that has been uploaded as a content file...

CVE-2017-16807

A cross-site Scripting XSS vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exists when displaying a specially prepared SVG document that has been uploaded as a content file...

CVE-2017-16807

The CVE-2017-16807 entry describes a cross-site scripting (XSS) vulnerability in Kirby Panel when displaying a specially crafted SVG uploaded as a content file. Affected software includes Kirby Panel versions before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7. The root cause is improper han...

Kirby CMS 2.5.7 - Cross-Site Scripting

Kirby CMS 2.5.7 - Cross-Site Scripting Exploit Title: KirbyCMS 2.5.7 Stored Cross Site Scripting Vendor Homepage: https://getkirby.com/ Software Link: https://getkirby.com/try Discovered by: Ishaq Mohammed Contact: https://twitter.com/securityprince Website: https://about.me/security-prince...

Kirby CMS < 2.5.7 - Cross-Site Scripting

Exploit Title: KirbyCMS 2.5.7 Stored Cross Site Scripting Vendor Homepage: https://getkirby.com/ Software Link: https://getkirby.com/try Discovered by: Ishaq Mohammed Contact: https://twitter.com/securityprince Website: https://about.me/security-prince Category: webapps Platform: PHP CVE:...

Bastian Allgeier Kirby任意文件上传漏洞

No description provided by source...

Bastian Allgeier Kirby Arbitrary File Upload Vulnerability

Bastian Allgeier Kirby is a content management system CMS from Bastian llgeiergs, Germany. An arbitrary file upload vulnerability exists in the Panel component of Bastian Allgeier Kirby 2.1.1 and earlier versions, which can be exploited by a remote attacker to execute arbitrary PHP code by...

CVE-2015-7773

Unrestricted file upload vulnerability in the Panel component in Bastian Allgeier Kirby before 2.1.2 allows remote authenticated users to execute arbitrary PHP code by uploading a file that lacks an extension, and then renaming this file to have a .php extension...

CVE-2015-7773

The CVE-2015-7773 issue affects Kirby CMS (Panel component) prior to 2.1.2. Affected: Kirby 2.1.1 and older; vulnerability: unrestricted file upload where an attacker with authentication can upload a file without an extension and rename it to .php to execute arbitrary PHP code on the server. Root...