Unsecured Adobe Server Exposes Data for 7.5 Million Creative Cloud Users

The U.S. multinational computer software company Adobe has suffered a serious security breach earlier this month that exposed user records' database belonging to the company's popular Creative Cloud service. With an estimated 15 million subscribers, Adobe Creative Cloud or Adobe CC is a...

CVE-2019-18416

Sourcecodester Restaurant Management System 1.0 allows XSS via the Last Name field of a member...

CVE-2019-18416

Sourcecodester Restaurant Management System 1.0 allows XSS via the Last Name field of a member...

CVE-2019-17368

S-CMS v1.5 has XSS in tpl.php via the member/memberlogin.php from parameter...

CVE-2019-17368

S-CMS v1.5 has XSS in tpl.php via the member/memberlogin.php from parameter...

PT-2019-15109

Name of the Vulnerable Software and Affected Versions OTCMS version 3.85 Description The issue concerns a CSRF flaw in the admin/member deal.php Admin Panel page. This allows for the creation of a new management group account, as shown by the ability to act as a superadmin. Recommendations For...

PT-2019-15108

Name of the Vulnerable Software and Affected Versions S-CMS version 1.5 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the member login.php parameter in the tpl.php file. Recommendations For S-CMS version 1.5,...

CVE-2019-17368: Improper Neutralization of Input During Web Page Generation

S-CMS v1.5 has XSS in tpl.php via the member/memberlogin.php from parameter...

Subrion 4.2.1 - (Email) Persistant Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Title: Subrion 4.2.1 - 'Email' Persistant Cross-Site Scripting Author: Min Ko Ko Creatigon Vendor Homepage: https://subrion.org/ CVE : https://nvd.nist.gov/vuln/detail/CVE-2019-17225 Website : https://l33thacker.com Description : Allows XSS vi...

Subrion 4.2.1 - 'Email' Persistant Cross-Site Scripting

Title: Subrion 4.2.1 - 'Email' Persistant Cross-Site Scripting Date: 2019-10-07 Author: Min Ko Ko Creatigon Vendor Homepage: https://subrion.org/ CVE : https://nvd.nist.gov/vuln/detail/CVE-2019-17225 Website : https://l33thacker.com Description : Allows XSS via the panel/members/ Username, Full...

CVE-2019-17225

Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin Member JSON Update" issue...

Session fixation

Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin Member JSON Update" issue...

CVE-2019-17225

Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin Member JSON Update" issue...

CVE-2019-17225

Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin Member JSON Update" issue...

CVE-2019-17225

CVE-2019-17225 affects Subrion 4.2.1. The vulnerability is a cross-site scripting (XSS) issue exposed via the panel/members/ fields for Username, Full Name, or Email (Admin Member JSON Update). The available documents confirm the affected product and the vulnerable input surface but do not provid...

CVE-2019-17225: Improper Neutralization of Input During Web Page Generation

Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin Member JSON Update" issue...

CVE-2019-8289

Vulnerability in Online Store v1.0, stored XSS in admin/userview.php adidasmemberemail variable...

CVE-2019-8290

Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by posting directly to sentregister.php allowing special characters to be included and an XSS payload to be injected...

CVE-2019-8289

Vulnerability in Online Store v1.0, stored XSS in admin/userview.php adidasmemberemail variable...

PT-2019-18966

Name of the Vulnerable Software and Affected Versions Online Store version 1.0 Description The issue concerns a stored XSS in the admin/user view.php file, specifically affecting the adidas member email variable. Recommendations For Online Store version 1.0, consider restricting access to the...