EUVD-2014-8602

Malware in sbrugna...

EUVD-2014-8601

Malware in sbrugna...

EUVD-2011-5154

Malware in sbrugna...

CVE-2014-8772

Cross-site scripting XSS vulnerability in the searchcontroller in X3 CMS 0.5.1 and 0.5.1.1 allows remote authenticated users to inject arbitrary web script or HTML via the search parameter...

CVE-2014-8771

Multiple cross-site request forgery CSRF vulnerabilities in the admin area in X3 CMS 0.5.1 and 0.5.1.1 allow remote attackers to hijack the authentication of administrators via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the searchcontroller in X3 CMS 0.5.1 and 0.5.1.1 allows remote authenticated users to inject arbitrary web script or HTML via the search parameter...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the admin area in X3 CMS 0.5.1 and 0.5.1.1 allow remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2014-8772

The CVE CVE-2014-8772 affects X3 CMS versions 0.5.1 and 0.5.1.1. The vulnerability is a Cross-site scripting (XSS) issue in the search_controller that allows remote authenticated users to inject arbitrary web script or HTML via the search parameter. The NVD entry lists a CVSS2 base score of 3.5 (...

CVE-2014-8771

Multiple cross-site request forgery CSRF vulnerabilities in the admin area in X3 CMS 0.5.1 and 0.5.1.1 allow remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2014-8771

CVE-2014-8771 affects X3 CMS versions 0.5.1 and 0.5.1.1, with multiple CSRF vulnerabilities in the admin area that allow remote attackers to hijack administrator authentication via unspecified vectors. Exploitation details are not provided in the available documents. The entry’s CVSS assessment i...

CVE-2014-8771: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the admin area in X3 CMS 0.5.1 and 0.5.1.1 allow remote attackers to hijack the authentication of administrators via unspecified vectors...

PT-2014-8727

Name of the Vulnerable Software and Affected Versions X3 CMS versions 0.5.1 through 0.5.1.1 Description A cross-site scripting XSS issue exists in the search controller, allowing remote authenticated users to inject arbitrary web script or HTML via the search parameter. This can lead to the...

PT-2014-8726

Name of the Vulnerable Software and Affected Versions X3 CMS versions 0.5.1 through 0.5.1.1 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the admin area. These vulnerabilities allow remote attackers to hijack the authentication of administrators via...

CVE-2014-8772: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the searchcontroller in X3 CMS 0.5.1 and 0.5.1.1 allows remote authenticated users to inject arbitrary web script or HTML via the search parameter...

X3 CMS 0.5.1.1 Cross Site Request Forgery / Cross Site Scripting

Product: X3 CMS 0.5.1 & 0.5.1.1 Vendor: X3 CMS Vulnerable Versions: 0.5.1 and 0.5.1.1 Tested Version: 0.5.1.1 Vendor Notification: 2 Nov , 2014 Vendor Patch: 7 Nov, 2014 Advisory Publication: 8 Nov, 2014 Public Disclosure: 8 November , 2014 Vulnerability Type: CSRF + Reflected Cross Site Scriptin...

X3 CMS 0.5.1.1 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities

X3 CMS versions 0.5.1 and 0.5.1.1 suffer from cross site request forgery and cross site scripting vulnerabilities. Product: X3 CMS 0.5.1 & 0.5.1.1 Vendor: X3 CMS Vulnerable Versions: 0.5.1 and 0.5.1.1 Tested Version: 0.5.1.1 Vendor Notification: 2 Nov , 2014 Vendor Patch: 7 Nov, 2014 Advisory...

CVE-2011-5255

Multiple cross-site scripting XSS vulnerabilities in admin/login in X3 CMS 0.4.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO, 2 username, or 3 password parameter...

CVE-2011-5255

CVE-2011-5255 corresponds to multiple XSS weaknesses in X3 CMS, affecting admin/login for version 0.4.3.1 and earlier. The vulnerability allows remote attackers to inject arbitrary web script or HTML via PATH_INFO, username, or password parameters. Reports in the connected documents confirm the a...

CVE-2011-5255

Multiple cross-site scripting XSS vulnerabilities in admin/login in X3 CMS 0.4.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO, 2 username, or 3 password parameter...

CVE-2011-5255: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in admin/login in X3 CMS 0.4.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO, 2 username, or 3 password parameter...