CVE-2021-32737: Improper Neutralization of Input During Web Page Generation

Sulu is an open-source PHP content management system based on the Symfony framework. In versions of Sulu prior to 1.6.41, it is possible for a logged in admin user to add a script injection cross-site-scripting in the collection title. The problem is patched in version 1.6.41. As a workaround, on...

Code injection in Narou

Narou aka Narou.rb before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel...

SULU Sulu 跨站脚本漏洞

SULU Sulu is an extensible, PHP-based open source content management system on Symfony framework from Sulu SULU Austria. A cross-site scripting vulnerability exists in Sulu, which stems from a collection title that does not securely validate user input, and allows an attacker to enter a malicious...

CVE-2021-31721

Chevereto before 3.17.1 allows Cross Site Scripting XSS via an image title at the image upload stage...

CVE-2021-31721

Chevereto before 3.17.1 allows Cross Site Scripting XSS via an image title at the image upload stage...

CVE-2021-31721: Improper Neutralization of Input During Web Page Generation

Chevereto before 3.17.1 allows Cross Site Scripting XSS via an image title at the image upload stage...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the novel's title name or author name. Remediation Upgrade narou to version 3.8.0 or higher. References - GitHub Additional Information - GitHub Commit - Ryotak Advisory...

CVE-2021-35514

Narou aka Narou.rb before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel...

CVE-2021-35514

Narou aka Narou.rb before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel...

CVE-2021-35514

Narou aka Narou.rb before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel...

Code injection

Narou aka Narou.rb before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel...

CVE-2021-35514

Narou aka Narou.rb before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel...

Narou 代码注入漏洞

Narou is a novel publishing site by an individual Japanese developer. Narou suffers from a code injection vulnerability in versions prior to 3.8.0 that allows an attacker to inject Ruby code via the title name or author name of a novel. An attacker could use this vulnerability to inject code to...

CVE-2021-35514: Improper Control of Generation of Code

Narou aka Narou.rb before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel...

CVE-2021-29960

Firefox used to cache the last filename used for printing a file. When generating a filename for printing, Firefox usually suggests the web page title. The caching and suggestion techniques combined may have lead to the title of a website visited during private browsing mode being stored on disk...

CVE-2021-29960

Firefox used to cache the last filename used for printing a file. When generating a filename for printing, Firefox usually suggests the web page title. The caching and suggestion techniques combined may have lead to the title of a website visited during private browsing mode being stored on disk...

VulnCheck KEV: CVE-2009-4490

minihttpd 1.19 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator...

CVE-2020-18654

Cross Site Scripting XSS in Wuzhi CMS v4.1.0 allows remote attackers to execute arbitrary code via the "Title" parameter in the component "/coreframe/app/guestbook/myissue.php"...

CVE-2020-18654: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in Wuzhi CMS v4.1.0 allows remote attackers to execute arbitrary code via the "Title" parameter in the component "/coreframe/app/guestbook/myissue.php"...

Wuzhi CMS 跨站脚本漏洞

WUZHI CMS WUZHI CMS is a high-performance open source content management system , support for the LNAMP architecture , suitable for portals , corporate Web site , mobile site , microblogging promotion. WUZHI CMS version 4.1.0 has a cross-site scripting vulnerability. Remote attackers can use the...