CVE-2018-1999008

October CMS version prior to build 437 contains a Cross Site Scripting XSS vulnerability in the Media module and create folder functionality that can result in an Authenticated user with media module permission creating arbitrary folder name with XSS content. This attack appear to be exploitable...

CVE-2018-1999009

October CMS version prior to Build 437 contains a Local File Inclusion vulnerability in modules/system/traits/ViewMaker.php244 makeFileContents function that can result in Sensitive information disclosure and remote code execution. This attack appear to be exploitable remotely if the /backend pat...

CVE-2018-1999009

October CMS prior to Build 437 is affected by a Local File Inclusion vulnerability in modules/system/traits/ViewMaker.php (makeFileContents). The issue can lead to sensitive information disclosure and remote code execution, and is exploitable remotely if the /backend path is accessible. The CVE d...

CVE-2018-1999008

October CMS version prior to build 437 contains a Cross Site Scripting XSS vulnerability in the Media module and create folder functionality that can result in an Authenticated user with media module permission creating arbitrary folder name with XSS content. This attack appear to be exploitable...

CVE-2018-1999008

October CMS: A Cross-Site Scripting (XSS) vulnerability in the Media module and Create Folder feature allows an authenticated user with media module permission to create folder names containing XSS content. The issue affects builds prior to 437 and is fixed in build 437. Documented as exploitable...

CVE-2018-1999009: Exposure of Sensitive Information to an Unauthorized Actor

October CMS version prior to Build 437 contains a Local File Inclusion vulnerability in modules/system/traits/ViewMaker.php244 makeFileContents function that can result in Sensitive information disclosure and remote code execution. This attack appear to be exploitable remotely if the /backend pat...

CVE-2018-1999008: Improper Neutralization of Input During Web Page Generation

October CMS version prior to build 437 contains a Cross Site Scripting XSS vulnerability in the Media module and create folder functionality that can result in an Authenticated user with media module permission creating arbitrary folder name with XSS content. This attack appear to be exploitable...

PT-2018-15193

Name of the Vulnerable Software and Affected Versions October CMS version prior to build 437 Description The issue is related to a Cross Site Scripting XSS vulnerability in the Media module and create folder functionality. This can be exploited by an authenticated user with media module permissio...

PT-2018-15194

Name of the Vulnerable Software and Affected Versions October CMS versions prior to Build 437 Description The issue is related to a Local File Inclusion vulnerability in the makeFileContents function within modules/system/traits/ViewMaker.php. This can lead to sensitive information disclosure and...

shop.samsung.com XSS vulnerability

Open Bug Bounty ID: OBB-651328 Description| Value ---|--- Affected Website:| shop.samsung.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

ishayshaer.com XSS vulnerability

Open Bug Bounty ID: OBB-650430 Description| Value ---|--- Affected Website:| ishayshaer.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sengoku-yaraideka.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-650224 Description| Value ---|--- Affected Website:| sengoku-yaraideka.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nonfiction.fr XSS vulnerability

Open Bug Bounty ID: OBB-648732 Description| Value ---|--- Affected Website:| nonfiction.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

deskgram.org XSS vulnerability

Open Bug Bounty ID: OBB-648710 Description| Value ---|--- Affected Website:| deskgram.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

heifer.org XSS vulnerability

Open Bug Bounty ID: OBB-648519 Description| Value ---|--- Affected Website:| heifer.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

cdn.worldredeye.com XSS vulnerability

Open Bug Bounty ID: OBB-645052 Description| Value ---|--- Affected Website:| cdn.worldredeye.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pbiproducts.aditime.com XSS vulnerability

Open Bug Bounty ID: OBB-643182 Description| Value ---|--- Affected Website:| pbiproducts.aditime.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

schubertsautobody.com XSS vulnerability

Open Bug Bounty ID: OBB-642871 Description| Value ---|--- Affected Website:| schubertsautobody.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

zong.com.pk XSS vulnerability

Open Bug Bounty ID: OBB-642597 Description| Value ---|--- Affected Website:| zong.com.pk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

aprendum.ec XSS vulnerability

Open Bug Bounty ID: OBB-642506 Description| Value ---|--- Affected Website:| aprendum.ec Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...