CVE-2017-6809

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.donate.php id parameter...

CVE-2017-6811

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.shop.php id parameter...

Cross site scripting

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.donate.php id parameter...

CVE-2017-6809

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.donate.php id parameter...

CVE-2017-6808

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.faq.php id parameter...

CVE-2017-6808

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.faq.php id parameter...

CVE-2017-6810

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.fplinks.php linkid parameter...

CVE-2017-6811

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.shop.php id parameter...

CVE-2017-6812

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.vote.php id parameter...

CVE-2017-6809

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.donate.php id parameter...

CVE-2017-6812

MaNGOSWebV4 4.0.8 is affected by a reflected XSS in inc/admin/template_files/admin.vote.php (id parameter). The vulnerability stems from unsanitized input echoed back to the page, enabling arbitrary script execution if a user visits a crafted URL. Affected product is MaNGOSWebV4; no vendor versio...

CVE-2017-6811

MaNGOSWebV4 4.0.8 is affected by a reflected XSS in inc/admin/template_files/admin.shop.php (id parameter). The vulnerability arises from unvalidated input in the id parameter, enabling script injection. No exploitation details or patches are provided in the supplied documents. Affected product i...

CVE-2017-6810

MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.fplinks.php (linkid parameter). The public documents explicitly confirm affected software and the vulnerable file/parameter. No details on exploit specifics beyond this. There is no remediation information provid...

CVE-2017-6809

MaNGOSWebV4 4.0.8 is described as vulnerable to a reflected XSS in inc/admin/template_files/admin.donate.php (id parameter). This CVE entry references a reflected XSS condition without provided exploit steps or remediation details in the connected documents. NVD lists a MEDIUM overall impact (CVS...

CVE-2017-6808

The provided connected documents identify CVE-2017-6808 as a reflected XSS in MaNGOSWebV4 4.0.8, specifically affecting inc/admin/template_files/admin.faq.php via the id parameter. This is documented across sources such as CNVD-2017-03504 and CVE/NVD entries. No exploitation details or remediatio...

Cross site scripting

paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php step parameter...

CVE-2017-6478

paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php step parameter...

CVE-2017-6478

paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php step parameter...

CVE-2017-6478

paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php step parameter...

CVE-2017-6478

MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php (step parameter) as CVE-2017-6478. Connected sources show PoCs and exploits targeting MaNGOSWebV4 4.0.6/4.0.8-era builds, including references to reflected XSS proofs of concept and related injections (SQL/XML/host-hea...