EUVD-2012-0855

Malware in sbrugna...

EUVD-2020-9428

Malware in sbrugna...

CVE-2020-17476

Mibew Messenger before 3.2.7 allows XSS via a crafted user name...

CVE-2020-17476

Mibew Messenger before 3.2.7 allows XSS via a crafted user name...

CVE-2020-17476

Mibew Messenger before 3.2.7 allows XSS via a crafted user name...

Cross site scripting

Mibew Messenger before 3.2.7 allows XSS via a crafted user name...

CVE-2020-17476

Mibew Messenger before 3.2.7 allows XSS via a crafted user name...

CVE-2020-17476

Mibew Messenger before 3.2.7 allows XSS via a crafted user name...

CVE-2020-17476

The CVE-2020-17476 issue affects Mibew Messenger prior to 3.2.7, where an XSS vulnerability is exploitable via a crafted user name. The vulnerability is documented across multiple feeds (NVD, Red Hat security page, OSV, CVE listings). The likely remediation is upgrading to Mibew Messenger 3.2.7 o...

CVE-2020-17476: Improper Neutralization of Input During Web Page Generation

Mibew Messenger before 3.2.7 allows XSS via a crafted user name...

PT-2020-15016

Name of the Vulnerable Software and Affected Versions Mibew Messenger versions prior to 3.2.7 Description The issue allows for XSS attacks through a crafted user name. Recommendations For versions prior to 3.2.7, update to version 3.2.7 or later to resolve the issue...

Mibew Messenger 1.6.15 Arbitrary File Disclosure

| Title : Mibew Messenger 1.6.15 File Accses Vulnerability | Author : indoushka | email : [email protected] | Dork : Mibew Messenger 1.6.15 | c 2011-2015 mibew.org | Tested on: windows 8.1 Français V.Pro | Download : http://mibew.org/ =======================================...

Mibew Web Messenger 1.6.4 SQL Injection

!/usr/bin/python Author: Ucha Gobejishvili Timeline: 2012-08-05 Bug Discovered 2012-08-05 Public Disclosured Vendor: Mibew Web Messenger http://mibew.org/ Version: Mibew Messenger 1.6.4 Demo: http://demo.mibew.org Introduction: Mibew Messenger also known as Open Web Messenger is an open-source li...

Mibew Messenger 1.6.4 - threadid SQL Injection

Mibew Messenger 1.6.4 - threadid SQL Injection source: https://www.securityfocus.com/bid/54857/info Mibew Messenger is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker t...

Mibew Messenger 1.6.4 - 'threadid' SQL Injection

source: https://www.securityfocus.com/bid/54857/info Mibew Messenger is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Mibew Messenger 1.6.4 and earlier allow remote attackers to hijack the authentication of operators for requests that insert cross-site scripting XSS sequences via the 1 address or 2 threadid parameters to operator/ban.php; or 3...

CVE-2012-0829

Multiple cross-site request forgery CSRF vulnerabilities in Mibew Messenger 1.6.4 and earlier allow remote attackers to hijack the authentication of operators for requests that insert cross-site scripting XSS sequences via the 1 address or 2 threadid parameters to operator/ban.php; or 3...

CVE-2012-0829

Multiple cross-site request forgery CSRF vulnerabilities in Mibew Messenger 1.6.4 and earlier allow remote attackers to hijack the authentication of operators for requests that insert cross-site scripting XSS sequences via the 1 address or 2 threadid parameters to operator/ban.php; or 3...

CVE-2012-0829: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Mibew Messenger 1.6.4 and earlier allow remote attackers to hijack the authentication of operators for requests that insert cross-site scripting XSS sequences via the 1 address or 2 threadid parameters to operator/ban.php; or 3...

PT-2012-2891

Name of the Vulnerable Software and Affected Versions Mibew Messenger versions 1.6.4 and earlier Description The issue allows remote attackers to hijack the authentication of operators for requests that insert cross-site scripting XSS sequences. This can be achieved via the address or threadid...