Magnolia CMS 跨站脚本漏洞

Magnolia is a Java-based open source content management system CMS. A reflected cross-site scripting vulnerability exists in the /magnoliaPublic/travel/members/login.html mgnlUserId parameter in Magnolia versions 6.1.3 - 6.2.3. No detailed vulnerability details are available at this time...

CVE-2013-4621

Magnolia CMS before 4.5.9 has multiple access bypass vulnerabilities...

Design/Logic Flaw

Magnolia CMS before 4.5.9 has multiple access bypass vulnerabilities...

CVE-2013-4621

Magnolia CMS before 4.5.9 has multiple access bypass vulnerabilities...

CVE-2013-4621

Magnolia CMS before 4.5.9 contains multiple access bypass vulnerabilities that let a non-admin user access and execute administrative functionality via direct URLs. Affected versions include Magnolia CMS

magnoliapublicschools.org XSS vulnerability

Open Bug Bounty ID: OBB-705525 Description| Value ---|--- Affected Website:| magnoliapublicschools.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

msa1.magnoliapublicschools.org XSS vulnerability

Open Bug Bounty ID: OBB-705346 Description| Value ---|--- Affected Website:| msa1.magnoliapublicschools.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

shop.magnoliajamesbridal.com XSS vulnerability

Open Bug Bounty ID: OBB-575684 Description| Value ---|--- Affected Website:| shop.magnoliajamesbridal.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

msa1.magnoliapublicschools.org XSS vulnerability

Vulnerable URL: http://msa1.magnoliapublicschools.org/apps/news/shownews.jsp?RECID=462667=0=%3C/title%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 15.10.2017 Latest check for patch:| 15.10.2017 22:37 GMT Vulnerability type:| XSS Vulnerability status:|...

msasc.magnoliapublicschools.org XSS vulnerability

Open Bug Bounty ID: OBB-257300 Description| Value ---|--- Affected Website:| msasc.magnoliapublicschools.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

msasc.magnoliapublicschools.org XSS vulnerability

Open Bug Bounty ID: OBB-211927 Description| Value ---|--- Affected Website:| msasc.magnoliapublicschools.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Magnolia Search Module 2.1 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15954/info Magnolia Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issu...

CVE-2013-4759

Multiple cross-site scripting XSS vulnerabilities in the Magnolia Form module 1.x before 1.4.7 and 2.x before 2.0.2 for Magnolia CMS allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 fullname, or 3 email parameter to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Magnolia Form module 1.x before 1.4.7 and 2.x before 2.0.2 for Magnolia CMS allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 fullname, or 3 email parameter to...

CVE-2013-4759

Multiple cross-site scripting XSS vulnerabilities in the Magnolia Form module 1.x before 1.4.7 and 2.x before 2.0.2 for Magnolia CMS allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 fullname, or 3 email parameter to...

CVE-2013-4759

The CVE-2013-4759 entry describes Cross-Site Scripting (XSS) in Magnolia CMS, specifically in the Magnolia Form module. Affected are Magnolia Form module versions 1.x before 1.4.7 and 2.x before 2.0.2, where insufficient sanitisation of user-supplied data in the username, fullname, and email para...

Cross-Site Scripting (XSS) in Magnolia CMS

Advisory ID: HTB23163 Product: Magnolia CMS Vendor: Magnolia International Ltd Vulnerable Versions: 4.5.7, 4.5.8, 4.5.9, 5.0 and 5.0.1 Community Edition Tested Version: 5.0 Community Edition Vendor Notification: July 3, 2013 Vendor Patch: July 18, 2013 Public Disclosure: July 24, 2013 Vulnerabili...

Xymon Systems and Network Monitor - remote file deletion vulnerability

Advisory ID: HTB23163 Product: Magnolia CMS Vendor: Magnolia International Ltd Vulnerable Versions: 4.5.7, 4.5.8, 4.5.9, 5.0 and 5.0.1 Community Edition Tested Version: 5.0 Community Edition Vendor Notification: July 3, 2013 Vendor Patch: July 18, 2013 Public Disclosure: July 24, 2013 Vulnerabili...

Magnolia CMS 5.0.1 Community Edition Cross Site Scripting

Magnolia CMS versions 5.0.1, 5.0, 4.5.9, 4.5.8, and 4.5.7 suffer from a cross site scripting vulnerability. Vendor: Magnolia International Ltd Vulnerable Versions: 4.5.7, 4.5.8, 4.5.9, 5.0 and 5.0.1 Community Edition Tested Version: 5.0 Community Edition Vendor Notification: July 3, 2013 Vendor...

Magnolia CMS 5.0.1 Community Edition Cross Site Scripting

Advisory ID: HTB23163 Product: Magnolia CMS Vendor: Magnolia International Ltd Vulnerable Versions: 4.5.7, 4.5.8, 4.5.9, 5.0 and 5.0.1 Community Edition Tested Version: 5.0 Community Edition Vendor Notification: July 3, 2013 Vendor Patch: July 18, 2013 Public Disclosure: July 24, 2013 Vulnerabili...