EUVD-2014-2058

Malware in sbrugna...

CVE-2014-2006

Cross-site scripting XSS vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-3881

Cross-site request forgery CSRF vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2014-2006

Cross-site scripting XSS vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to hijack the authentication of arbitrary users...

Cross site scripting

Cross-site scripting XSS vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-2006

Cross-site scripting XSS vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-5573

Name of the Vulnerable Software and Affected Versions Intercom Web Kyukincho versions prior to 3.0.030 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For versions prior to 3.0.030, update to version 3.0.030 o...

CVE-2014-2006

CVE-2014-2006 is a cross-site scripting (XSS) vulnerability affecting Intercom Web Kyukincho. The issue resides in Web Kyukincho V3 before 3.0.030, where an arbitrary script could be injected and executed in the user’s browser via unspecified vectors. Affected product/version: Web Kyukincho V3 (p...

CVE-2014-3881

CVE-2014-3881 describes a CSRF vulnerability in Intercom Web Kyukincho 3.x (prior to 3.0.030) that enables an attacker to hijack the user’s authenticated actions when a logged-in user visits a malicious page. Affected product: Web Kyukincho (Intercom, Inc.) prior to 3.0.030. Root cause: cross-sit...

PT-2014-4427

Name of the Vulnerable Software and Affected Versions Intercom Web Kyukincho versions prior to 3.0.030 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 3.0.030, update to version 3.0.030 or later to...

CVE-2014-2006: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-3881: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2014-3881

Cross-site request forgery CSRF vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to hijack the authentication of arbitrary users...

Web Kyukincho vulnerable to cross-site request forgery

Overview Web Kyukincho provided by Intercom, Inc. is a software that digitizes and distributes a pay statement and others. Web Kyukincho contains a cross-site request forgery vulnerability. Impact If a user views a malicious page while logged in, unintended operations may be conducted. Solution...

Web Kyukincho vulnerable to cross-site scripting

Overview Web Kyukincho provided by Intercom, Inc. is a software that digitizes and distributes a pay statement and others. Web Kyukincho contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed in the user's web browser. Solution Update the Software Update to the...

JVN#80006084: Web Kyukincho vulnerable to cross-site scripting

Web Kyukincho provided by Intercom, Inc. is a software that digitizes and distributes a pay statement and others. Web Kyukincho contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed in the user's web browser. Solution Update the Software Update to the latest...

JVN#36259412: Web Kyukincho vulnerable to cross-site request forgery

Web Kyukincho provided by Intercom, Inc. is a software that digitizes and distributes a pay statement and others. Web Kyukincho contains a cross-site request forgery vulnerability. Impact If a user views a malicious page while logged in, unintended operations may be conducted. Solution Update the...