534 matches found
CVE-2015-5613: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving a file title, a different vulnerability than CVE-2015-5612...
CVE-2015-5613
Cross-site scripting XSS vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving a file title, a different vulnerability than CVE-2015-5612...
CVE-2015-5613
CVE-2015-5613 describes a cross-site scripting (XSS) vulnerability in October CMS builds 271 and earlier. The vulnerability allows remote attackers to inject arbitrary web script or HTML through vectors involving a file title (and related caption/title contexts in several references). Affected so...
CVE-2015-5613
Cross-site scripting XSS vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving a file title, a different vulnerability than CVE-2015-5612...
PT-2017-6872
Name of the Vulnerable Software and Affected Versions October CMS versions prior to build 272 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors involving a file title. Recommendations For October CMS versions prior to build 272...
October CMS 1.0.412 - Multiple Vulnerabilities
October CMS 1.0.412 - Multiple Vulnerabilities October CMS v1.0.412 several vulnerabilities Information =========== Name: October CMS v1.0.412 build 412 Homepage: http://octobercms.com Vulnerability: several issues, including PHP code execution Prerequisites: attacker has to be authenticated user...
October CMS 1.0.412 - Multiple Vulnerabilities
October CMS v1.0.412 several vulnerabilities Information =========== Name: October CMS v1.0.412 build 412 Homepage: http://octobercms.com Vulnerability: several issues, including PHP code execution Prerequisites: attacker has to be authenticated user with media or asset management permission CVE:...
October CMS Upload Protection Bypass Code Execution
This module exploits an Authenticated user with permission to upload and manage media contents can upload various files on the server. Application prevents the user from uploading PHP code by checking the file extension. It uses black-list based approach, as seen in...
October CMS 1.0.412 Code Execution / Shell Upload
October CMS v1.0.412 several vulnerabilities Information =========== Name: October CMS v1.0.412 build 412 Homepage: http://octobercms.com Vulnerability: several issues, including PHP code execution Prerequisites: attacker has to be authenticated user with media or asset management permission CVE:...
Cross site scripting
Cross-site scripting XSS vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via the caption tag of a profile image...
CVE-2015-5612
Cross-site scripting XSS vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via the caption tag of a profile image...
CVE-2015-5612
Affected software: October CMS (build 271 and earlier). Vulnerability: cross-site scripting (XSS) via the caption tag of a profile image. Root cause: improper handling of caption tag leads to script/HTML injection. Impact: remote attacker can inject arbitrary script/HTML. Exploitation details are...
PT-2015-6986
Name of the Vulnerable Software and Affected Versions October CMS versions prior to build 272 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the caption tag of a profile image. Recommendations For October CMS versions prior to build...
CVE-2015-5612: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via the caption tag of a profile image...