486 matches found
October CMS Users Plugin Cross-Site Scripting Vulnerability
October CMS is a Canadian software developer Alexey Bobkov and Australian software developer Samuel Georges developed a set of open source, self-hosted built on the Laravel PHP framework content management system CMS. users also known as Front-end user management is used in one of the front-end...
October CMS User 1.4.5 Cross Site Scripting
Exploit Title: October CMS User Plugin v1.4.5 - Persistent Cross-Site Scripting Date: 2018-04-03 Author: 0xB9 Software Link: https://octobercms.com/plugin/rainlab-user Version: 1.4.5 Tested on: Ubuntu 17.10 CVE: CVE-2018-10366 1. Description: Front-end user management for October CMS. Allows...
October CMS User Plugin v1.4.5 - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: October CMS User Plugin v1.4.5 - Persistent Cross-Site Scripting Author: 0xB9 Software Link: https://octobercms.com/plugin/rainlab-user Version: 1.4.5 Tested on: Ubuntu 17.10 CVE: CVE-2018-10366 1. Description: Front-end user...
October CMS User Plugin 1.4.5 - Persistent Cross-Site Scripting
October CMS User Plugin 1.4.5 - Persistent Cross-Site Scripting Exploit Title: October CMS User Plugin v1.4.5 - Persistent Cross-Site Scripting Date: 2018-04-03 Author: 0xB9 Software Link: https://octobercms.com/plugin/rainlab-user Version: 1.4.5 Tested on: Ubuntu 17.10 CVE: CVE-2018-10366 1...
October CMS User Plugin 1.4.5 - Persistent Cross-Site Scripting
Exploit Title: October CMS User Plugin v1.4.5 - Persistent Cross-Site Scripting Date: 2018-04-03 Author: 0xB9 Software Link: https://octobercms.com/plugin/rainlab-user Version: 1.4.5 Tested on: Ubuntu 17.10 CVE: CVE-2018-10366 1. Description: Front-end user management for October CMS. Allows...
CVE-2018-10366
An issue was discovered in the Users aka Front-end user management plugin 1.4.5 for October CMS. XSS exists in the name field...
CVE-2018-10366
An issue was discovered in the Users aka Front-end user management plugin 1.4.5 for October CMS. XSS exists in the name field...
Design/Logic Flaw
An issue was discovered in the Users aka Front-end user management plugin 1.4.5 for October CMS. XSS exists in the name field...
CVE-2018-10366
An issue was discovered in the Users aka Front-end user management plugin 1.4.5 for October CMS. XSS exists in the name field...
CVE-2018-10366
The CVE-2018-10366 entry corresponds to a stored/reflected Cross-Site Scripting (XSS) in the October CMS Users plugin (rainlab-user) version 1.4.5, where the name field is susceptible to XSS. The vulnerability is tied to the front-end user management feature and is active in 1.4.5 with PoC eviden...
CVE-2018-10366: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the Users aka Front-end user management plugin 1.4.5 for October CMS. XSS exists in the name field...
October CMS 1.0.431 - Cross-Site Scripting
October CMS 1.0.431 - Cross-Site Scripting Exploit Title: October CMS Stored Code Injection Date: 16-02-2018 Exploit Author: Samrat Das Contact: http://twitter.com/SamratDas93 Website: https://securitywarrior9.blogspot.in/ Vendor Homepage: https://octobercms.com/ Version: All versions till dat...
October CMS Cross Site Scripting
Exploit Title: October CMS Stored Code Injection Date: 16-02-2018 Exploit Author: Samrat Das Contact: http://twitter.com/SamratDas93 Website: https://securitywarrior9.blogspot.in/ Vendor Homepage: https://octobercms.com/ Version: All versions till date from 1.0.431 CVE : CVE- 2018-7198 Category:...
October CMS < 1.0.431 - Cross-Site Scripting
Exploit Title: October CMS Stored Code Injection Date: 16-02-2018 Exploit Author: Samrat Das Contact: http://twitter.com/SamratDas93 Website: https://securitywarrior9.blogspot.in/ Vendor Homepage: https://octobercms.com/ Version: All versions till date from 1.0.431 CVE : CVE- 2018-7198 Category:...
Deserialization of untrusted data
October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page...
CVE-2018-7198
October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page...
CVE-2018-7198
October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page...
CVE-2018-7198
October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page...
CVE-2018-7198
CVE-2018-7198 affects October CMS up to version 1.0.431, specifically the RainLab Blog Plugin. It enables stored XSS by entering HTML on the Add Posts page, allowing a malicious payload to be stored and subsequently executed. The issue is documented across multiple sources (GHSA/OSV and exploit r...