EUVD-2018-6339

Malware in sbrugna...

CVE-2018-14422

blog/index.php in SansCMS 0.7 has XSS via the q parameter...

CVE-2018-14422

blog/index.php in SansCMS 0.7 has XSS via the q parameter...

Design/Logic Flaw

blog/index.php in SansCMS 0.7 has XSS via the q parameter...

SansCMS Cross-Site Scripting Vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in the blog/index.php file in SansCMS version 0.7. A remote attacker can exploit this vulnerabilit...

CVE-2018-14422

blog/index.php in SansCMS 0.7 has XSS via the q parameter...

CVE-2018-14422

SansCMS 0.7 contains a cross-site scripting vulnerability in blog/index.php via the q parameter. The issue allows injection of arbitrary web script/HTML, with the impact described as partial integrity compromise and low confidentiality impact in CVSS terms. No precise exploit details are provided...

CVE-2018-14422: Improper Neutralization of Input During Web Page Generation

blog/index.php in SansCMS 0.7 has XSS via the q parameter...

PT-2018-12504

Name of the Vulnerable Software and Affected Versions SansCMS version 0.7 Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the q parameter of the 'blog/index.php' endpoint. Recommendations...