EUVD-2018-10262

Malware in sbrugna...

TeaKKi Cross-Site Scripting Vulnerability

TeaKKi is a team document collaboration software. The software features document synchronization, category management and rights management. A cross-site scripting vulnerability exists in TeaKKi version 2.7. The vulnerability can be exploited by remote attackers to inject arbitrary web script or...

CVE-2018-18540

TeaKKi 2.7 allows XSS via a crafted onerror attribute for a picture's URL...

Cross site scripting

TeaKKi 2.7 allows XSS via a crafted onerror attribute for a picture's URL...

CVE-2018-18540

TeaKKi 2.7 allows XSS via a crafted onerror attribute for a picture's URL...

CVE-2018-18540

TeaKKi 2.7 allows XSS via a crafted onerror attribute for a picture's URL...

CVE-2018-18540

TeaKKi 2.7 contains a Cross-Site Scripting (XSS) vulnerability exploitable via a crafted onerror attribute in an image tag to set the picture URL. Public sources (NVD and CNVD entries) describe this onerror-based XSS as the root issue affecting TeaKKi 2.7; the exact technical exploit details are ...

CVE-2018-18540: Improper Neutralization of Input During Web Page Generation

TeaKKi 2.7 allows XSS via a crafted onerror attribute for a picture's URL...

PT-2018-14502

Name of the Vulnerable Software and Affected Versions TeaKKi version 2.7 Description The issue allows for XSS attacks through a crafted onerror attribute for a picture's URL. Recommendations For TeaKKi version 2.7, consider validating and sanitizing user-inputted URLs for pictures to prevent...