EUVD-2018-8810

Malware in sbrugna...

Monstra CMS Cross-Site Scripting Vulnerability (CNVD-2019-03473)

Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. A cross-site scripting vulnerability exists in the admin/index.php file in Monstra CMS version 3.0.4, which c...

Monstra CMS Cross-Site Scripting Vulnerability (CNVD-2019-03469)

Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. A cross-site scripting vulnerability exists in the admin/index.php file in Monstra CMS version 3.0.4, which c...

PT-2018-13846

Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4 Description The issue concerns an XSS exploit via the page meta title parameter in the admin/index.php file when performing an edit page action for a page without a special role. Recommendations For Monstra CMS versio...

PT-2018-13845

Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4 Description The issue concerns an XSS exploit via the page meta title parameter in the add page action. This is related to the admin/index.php file in Monstra CMS. Recommendations For Monstra CMS version 3.0.4, avoid...

PT-2018-13847

Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4 Description The issue concerns an XSS vulnerability. It can be exploited via the page meta title parameter in an "edit page&name=error404" action on the "admin/index.php" page. Recommendations For Monstra CMS version...