CVE-2018-5692

Piwigo v2.8.2 has XSS via the tab, to, section, mode, installstatus, and display parameters of the admin.php file...

CVE-2018-5692: Improper Neutralization of Input During Web Page Generation

Piwigo v2.8.2 has XSS via the tab, to, section, mode, installstatus, and display parameters of the admin.php file...

Online Ticket Booking Cross-Site Scripting Vulnerability (CNVD-2018-01215)

Advanced Real Estate Script is a ready-made real estate website script.Online Ticket Booking is one of the online booking systems. A cross-site scripting vulnerability exists in Online Ticket Booking in Advanced Real Estate Script. The vulnerability can be exploited to conduct cross-site scriptin...

Clooud 1.4.0 Shell Upload

======================================================================================================= | Title : Clooud v1.4.0 - Premium Media Sharing Script unrestricted file upload Vulnerability | | Author : indoushka | | email : [email protected] | | Tested on : windows 10 FranASSais...

StivaSoft PHPJabbers File Sharing Script Cross-Site Scripting Vulnerability

StivaSoft PHPJabbers File Sharing Script is a set of online file sharing scripts from the Bulgarian company StivaSoft. A cross-site scripting vulnerability exists in the comments section of StivaSoft PHPJabbers File Sharing Script. A remote attacker can exploit this vulnerability to inject...

CVE-2017-12813

PHPJabbers File Sharing Script 1.0 has stored XSS in the comments section...

CVE-2017-12813: Improper Neutralization of Input During Web Page Generation

PHPJabbers File Sharing Script 1.0 has stored XSS in the comments section...

PT-2017-12706

Name of the Vulnerable Software and Affected Versions PHPJabbers File Sharing Script version 1.0 Description The issue is related to stored XSS in the comments section, allowing potential exploitation. Recommendations For PHPJabbers File Sharing Script version 1.0, consider validating and...

CVE-2017-17868

In Liferay Portal 6.1.0, the tags section has XSS via a Public Render Parameter prp value, as demonstrated by prp564233524tag...

CVE-2017-17868: Improper Neutralization of Input During Web Page Generation

In Liferay Portal 6.1.0, the tags section has XSS via a Public Render Parameter prp value, as demonstrated by prp564233524tag...

PT-2017-15092

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Responsive Realestate Script affected versions not specified Description The issue concerns a CSRF vulnerability. It affects the admin/general section, allowing for potential unauthorized actions. Recommendations At the moment...

Liferay Porta tags section cross-site scripting vulnerability

Liferay Portal is a J2EE-based portal solution from Liferay, Inc. The solution uses EJB as well as JMS and other technologies , and can be used as a Web publishing and sharing workspaces , enterprise collaboration platforms , social networks and so on. A cross-site scripting vulnerability exists ...

PT-2017-15057

Name of the Vulnerable Software and Affected Versions Liferay Portal version 6.1.0 Description The issue concerns a Cross-Site Scripting XSS vulnerability. It is related to the tags section and can be triggered via a Public Render Parameter p r p value. Specifically, the p r p 564233524 tag value...

CVE-2017-17827

Piwigo 2.9.2 is vulnerable to Cross-Site Request Forgery via /admin.php?page=configuration&section=main or /admin.php?page=batchmanager&mode=unit. An attacker can exploit this to coerce an admin user into performing unintended actions...

PT-2017-15032

Name of the Vulnerable Software and Affected Versions Piwigo version 2.9.2 Description The issue allows an attacker to perform Cross-Site Request Forgery attacks, potentially coercing an admin user into performing unintended actions. This can be achieved via the...

PT-2017-15031

Name of the Vulnerable Software and Affected Versions Piwigo version 2.9.2 Description The issue affects the Configuration component, where a Persistent Cross Site Scripting vulnerability exists via the gallery title parameter in an "admin.php?page=configuration&section=main" request. This can be...

WP Site Protect 1.0 - Cross-Site Scripting (XSS)

The wp-site-protect allows to protect the access to a wordpress website with a global password. Passwords can be randomly generated or manually set, the "password" field is not properly sanitized, allowing some XSS in different views of the plugins in the administration section. It seems that the...

KLA11160 Obsolete Adobe Flash Player for Windows

A remote code execution vulnerability was found in Adobe Flash Player. This vulnerability can be exploited via a specially designed webpage to execute arbitrary code. Original advisories ADV170022 Exploitation Related products Microsoft-Windows CVE list KB list 4053577 Solution Install necessary...

Process Doppelgänging: New Malware Evasion Technique Works On All Windows Versions

A team of security researchers has discovered a new malware evasion technique that could help malware authors defeat most of the modern antivirus solutions and forensic tools. Dubbed Process Doppelgänging, the new fileless code injection technique takes advantage of a built-in Windows function an...

GNU Binutils Denial of Service Vulnerability (CNVD-2017-36676)

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. A denial of service vulnerability exists in the loaddebugsection function in readelf.c in GNU Binutils 2.29.1. A remote attacker could exploit this...