CVE-2018-19201

A reflected XSS vulnerability in the ModCP Profile Editor in MyBB before 1.8.20 allows remote attackers to inject JavaScript via the 'username' parameter...

PT-2019-9757

Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.8.20 Description A reflected XSS issue allows remote attackers to inject JavaScript via the username parameter in the ModCP Profile Editor. Recommendations For versions prior to 1.8.20, update to version 1.8.20 or late...

CVE-2018-19201: Improper Neutralization of Input During Web Page Generation

A reflected XSS vulnerability in the ModCP Profile Editor in MyBB before 1.8.20 allows remote attackers to inject JavaScript via the 'username' parameter...

CVE-2018-11348

Two XSS vulnerabilities are located in the profile edition page of the user panel of the YunoHost 2.7.2 through 2.7.14 web application. By injecting a JavaScript payload, these flaws could be used to manipulate a user's session...

Cisco AnyConnect Profile Editor XML External Entity Injection Vulnerability

Cisco AnyConnect Secure Mobility Client is a secure mobility client from Cisco that provides secure access to networks and applications from any device. the Profile Editor is one of the Profile Document Editors. An XML external entity injection vulnerability exists in the Profile Editor in the...

CVE-2018-0100

A vulnerability in the Profile Editor of the Cisco AnyConnect Secure Mobility Client could allow an unauthenticated, local attacker to have read and write access to information stored in the affected system. The vulnerability is due to improper handling of the XML External Entity XXE entries when...

CVE-2018-0100

A vulnerability in the Profile Editor of the Cisco AnyConnect Secure Mobility Client could allow an unauthenticated, local attacker to have read and write access to information stored in the affected system. The vulnerability is due to improper handling of the XML External Entity XXE entries when...

Xxe

A vulnerability in the Profile Editor of the Cisco AnyConnect Secure Mobility Client could allow an unauthenticated, local attacker to have read and write access to information stored in the affected system. The vulnerability is due to improper handling of the XML External Entity XXE entries when...

CVE-2018-0100

A vulnerability in the Profile Editor of the Cisco AnyConnect Secure Mobility Client could allow an unauthenticated, local attacker to have read and write access to information stored in the affected system. The vulnerability is due to improper handling of the XML External Entity XXE entries when...

CVE-2018-0100

The CVE-2018-0100 issue affects the Cisco AnyConnect Secure Mobility Client Profile Editor. It is an XML External Entity (XXE) injection vulnerability in how the Profile Editor parses XML files, allowing an unauthenticated, local attacker to read and write information on the affected system. Mult...

PT-2018-8610

Name of the Vulnerable Software and Affected Versions: Cisco AnyConnect Secure Mobility Client affected versions not specified Description: A vulnerability in the Profile Editor could allow an unauthenticated, local attacker to have read and write access to information stored in the affected...

CVE-2018-0100: Improper Restriction of XML External Entity Reference

A vulnerability in the Profile Editor of the Cisco AnyConnect Secure Mobility Client could allow an unauthenticated, local attacker to have read and write access to information stored in the affected system. The vulnerability is due to improper handling of the XML External Entity XXE entries when...

Cisco AnyConnect Profile Editor XML External Entity Injection Vulnerability

A vulnerability in the Profile Editor of the Cisco AnyConnect Secure Mobility Client could allow an unauthenticated, local attacker to have read and write access to information stored in the affected system. The vulnerability is due to improper handling of the XML External Entity XXE entries when...

MyBB 1.8.6 - Cross-Site Scripting

Security Advisory - Curesec Research Team 1. Introduction Affected Product: MyBB 1.8.6 Fixed in: 1.8.7 Fixed Version Link: http://resources.mybb.com/downloads/mybb1807.zip Vendor Website: http://www.mybb.com/ Vulnerability Type: XSS Remote Exploitable: Yes Reported to vendor: 01/29/2016 Disclosed...

Google Store Cross Site Request Forgery

+Exploiy Title: Google Store Multiple XSRF Security Vulnerabilities +Date: 26\08\2011 +Author: C4SS!0 G0M3S +Vendor Link: https://www.google-store.com Add User First Name: Last Name: E-mail Address: Company: Address: Post Code: City: Telephone: Fax: /...