106 matches found
GHSA-5M69-3CHG-6F8M Cross Site Scripting (XSS) in Quokka
Cross Site Scripting XSS in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'...
Quokka has an unspecified vulnerability
Quokka is an open source content management framework written in Python. version 0.4.0 of Quokka contains a security vulnerability that could be exploited to execute arbitrary code via the component "quokka/core/content/views.py"...
Quokka XML External Entity Injection Vulnerability (CNVD-2021-94927)
Quokka is a content management framework written in Python. quokka version 0.4.0 is vulnerable to XML external entity injection. A remote attacker can exploit this vulnerability to execute arbitrary code via the quokka/utils/atom.py component...
Quokka Cross-Site Scripting Vulnerability
Quokka is a content management framework written in Python. version 0.4.0 of Quokka is vulnerable to a cross-site scripting vulnerability. An attacker can exploit the vulnerability to execute arbitrary code via the Username parameter in the quokka/admin/actions.py component...
CVE-2020-18703
XML External Entities XXE in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'...
CVE-2020-18705
XML External Entities XXE in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'...
CVE-2020-18702
Cross Site Scripting XSS in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'...
CVE-2020-18703
XML External Entities XXE in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'...
CVE-2020-18705
XML External Entities XXE in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'...
CVE-2020-18702
Cross Site Scripting XSS in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'...
PYSEC-2021-144
XML External Entities XXE in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'...
PYSEC-2021-145
XML External Entities XXE in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'...
PYSEC-2021-143
Cross Site Scripting XSS in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'...
PYSEC-2021-144
XML External Entities XXE in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'...
Xxe
XML External Entities XXE in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'...
PYSEC-2021-145
XML External Entities XXE in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'...
Cross site scripting
Cross Site Scripting XSS in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'...
CVE-2020-18705
XML External Entities XXE in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'...
CVE-2020-18705
CVE-2020-18705 describes an XML External Entities (XXE) vulnerability in Quokka v0.4.0, exploitable through the quokka/core/content/views.py component which could allow a remote attacker to execute arbitrary code. The issue is documented across multiple sources (NVD, RH, OSV, CNVD, GHSA) as XXE i...