622 matches found
CVE-2018-8071
Mautic before v2.13.0 has stored XSS via a theme config file...
CVE-2018-8071
Mautic before v2.13.0 has stored XSS via a theme config file...
CVE-2018-8092
Mautic before 2.13.0 allows CSV injection...
Input validation
Mautic before 2.13.0 allows CSV injection...
CVE-2018-8092
Mautic before 2.13.0 allows CSV injection...
CVE-2018-8092
CVE-2018-8092 affects Mautic prior to 2.13.0, enabling a CSV injection in exported contact lists. The issue is documented in multiple sources (e.g., GHSA-29V9-2FPX-J5G9 and OSV/GHSA advisories) with a fix recommended: update to 2.13.0 or later. The connected documents confirm the vulnerability is...
CVE-2018-8071
CVE-2018-8071 affects Mautic prior to v2.13.0 and involves a stored cross-site scripting (XSS) vulnerability in the theme config file. The underlying issue is that malicious input placed in the theme config.json could be stored and later rendered, allowing execution of arbitrary scripts in the vi...
CVE-2018-8071
Mautic before v2.13.0 has stored XSS via a theme config file...
CVE-2018-10189
An issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per contact due to tracking the contact by their auto-incremented ID. Thus, a third party can manipulate the cookie value with +1 to systematically assume being tracked as each...
Design/Logic Flaw
An issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per contact due to tracking the contact by their auto-incremented ID. Thus, a third party can manipulate the cookie value with +1 to systematically assume being tracked as each...
CVE-2018-10189
An issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per contact due to tracking the contact by their auto-incremented ID. Thus, a third party can manipulate the cookie value with +1 to systematically assume being tracked as each...
CVE-2018-10189
An issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per contact due to tracking the contact by their auto-incremented ID. Thus, a third party can manipulate the cookie value with +1 to systematically assume being tracked as each...
CVE-2018-10189
In Mautic 1.x and 2.x before 2.13.0, an attacker can systematically emulate tracking cookies per contact by manipulating the cookie value with +1, effectively allowing a third party to assume the tracked identity of other contacts and access information via forms using progressive profiling. This...
Mautic Cross-Site Scripting Vulnerability
Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. A cross-site scripting vulnerability exists in Company name in Mautic 2.11.0 and earlier versions. A remote attacker can exploit this vulnerability to...
Cross site scripting
Mautic version 2.11.0 and earlier contains a Cross Site Scripting XSS vulnerability in Company's name that can result in denial of service and execution of javascript code...
CVE-2017-1000506
Mautic version 2.11.0 and earlier contains a Cross Site Scripting XSS vulnerability in Company's name that can result in denial of service and execution of javascript code...
CVE-2017-1000506
Mautic version 2.11.0 and earlier contains a Cross Site Scripting XSS vulnerability in Company's name that can result in denial of service and execution of javascript code...
CVE-2017-1000506
CVE-2017-1000506 affects Mautic
CVE-2017-1000506
Mautic version 2.11.0 and earlier contains a Cross Site Scripting XSS vulnerability in Company's name that can result in denial of service and execution of javascript code...
Mautic Arbitrary File Download Vulnerability
Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. A security vulnerability exists in Mautic versions 1.0.0 through 2.11.0. An attacker can exploit the vulnerability to download arbitrary files from the...