EUVD-2021-17087

Malware in sbrugna...

EUVD-2002-1516

Malware in sbrugna...

CVE-2021-30150

Composr 10.0.36 allows XSS in an XML script...

XML External Entity Injection (XXE)

org.xwiki.commons:xwiki-commons-xml is vulnerable to XML external entity injection XXE. A remote authenticated attacker is able to inject a specifically crafted script through the XML script service to gain access to sensitive user information...

CVE-2022-24898: Improper Restriction of XML External Entity Reference

org.xwiki.commons:xwiki-commons-xml is a common module used by other XWiki top level projects. Starting in version 2.7 and prior to versions 12.10.10, 13.4.4, and 13.8-rc-1, it is possible for a script to access any file accessing to the user running XWiki application server with XML External...

CVE-2021-30150

Composr 10.0.36 allows XSS in an XML script...

CVE-2021-30150

Composr 10.0.36 allows XSS in an XML script...

CVE-2021-30150

Composr 10.0.36 allows XSS in an XML script...

CVE-2021-30150: Improper Neutralization of Input During Web Page Generation

Composr 10.0.36 allows XSS in an XML script...

CVE-2021-27513

The module adminITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php files because it relies on "le filtre userside."...

CVE-2002-1534

Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share...