EUVD-2018-4943

Malware in sbrugna...

EUVD-2018-8828

Malware in sbrugna...

CVE-2018-17045

An issue was discovered in CMS MaeloStore V.1.5.0. There is a CSRF vulnerability that can change the administrator password via admin/modul/users/aksiusers.php?act=update...

CVE-2018-17045

An issue was discovered in CMS MaeloStore V.1.5.0. There is a CSRF vulnerability that can change the administrator password via admin/modul/users/aksiusers.php?act=update...

Design/Logic Flaw

An issue was discovered in CMS MaeloStore V.1.5.0. There is a CSRF vulnerability that can change the administrator password via admin/modul/users/aksiusers.php?act=update...

CVE-2018-17045

CMS MaeloStore V1.5.0 contains a CSRF vulnerability that can change the administrator password via the endpoint admin/modul/users/aksi_users.php?act=update. Affected software: MaeloStore CMS (V1.5.0). Root cause: improper CSRF protections allowing an attacker to trigger a password change. Impact:...

CVE-2018-17045

An issue was discovered in CMS MaeloStore V.1.5.0. There is a CSRF vulnerability that can change the administrator password via admin/modul/users/aksiusers.php?act=update...

CMS MaeloStore Cross-Site Scripting Vulnerability

CMS MaeloStore is a PHP and MySQL based Content Management System CMS for web publishing and product catalogs. A cross-site scripting vulnerability exists in the Telephone field of the admin interface in CMS MaeloStore version 1.5.0. A remote attacker can exploit this vulnerability to inject...

CVE-2018-12992

An issue was discovered CMS MaeloStore V.1.5.0. There is stored XSS in the Telephone field of the admin interface...

CVE-2018-12992

An issue was discovered CMS MaeloStore V.1.5.0. There is stored XSS in the Telephone field of the admin interface...

Cross site scripting

An issue was discovered CMS MaeloStore V.1.5.0. There is stored XSS in the Telephone field of the admin interface...

CVE-2018-12992

An issue was discovered CMS MaeloStore V.1.5.0. There is stored XSS in the Telephone field of the admin interface...

CVE-2018-12992

CMS MaeloStore V1.5.0 contains a stored cross‑site scripting (XSS) vulnerability in the Telephone field of the admin interface. Multiple connected records (NVD, CNVD/CVELIST/PRION) corroborate an XSS issue in this version, with details stating an attacker can inject script/HTML via the Telephone ...