EUVD-2018-8433

Malware in sbrugna...

EUVD-2020-11415

Malware in sbrugna...

CVE-2020-19511

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

CVE-2020-19511

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

Cross site scripting

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

CVE-2020-19511

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

CVE-2020-19511

CVE-2020-19511 affects Typesetter 5.1. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the index.php/Admin/Classes interface, specifically through the className and Description fields. Descriptions across multiple connected sources confirm the editable fields in the admin U...

CVE-2020-19511

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

CVE-2020-19511: Improper Neutralization of Input During Web Page Generation

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

PT-2021-3388

Name of the Vulnerable Software and Affected Versions Typesetter version 5.1 Description The issue is related to a Cross Site Scripting vulnerability. It is associated with the failure to take measures to protect the structure of web pages, specifically through the className and Description field...

Typesetter cross-site scripting vulnerabilities

Typesetter is an open source CMS written in PHP with True WYSIWYG editing and flat file storage. Typesetter suffers from a cross-site scripting vulnerability. The vulnerability can be exploited to conduct cross-site scripting attacks via the className and Description fields in...

CVE-2018-16626

CVE-2018-16626 affects Typesetter 5.1: index.php/Admin/Classes allows cross-site scripting via the description of a new class name. The vulnerability is an XSS in the class-creation workflow, arising from how the description field is processed in Admin/Classes. Public references in the connected ...

CVE-2018-16626: Improper Neutralization of Input During Web Page Generation

index.php/Admin/Classes in Typesetter 5.1 allows XSS via the description of a new class name...

PT-2019-9361

Name of the Vulnerable Software and Affected Versions Typesetter version 5.1 Description The issue allows for XSS via the description of a new class name in the index.php/Admin/Classes endpoint. Recommendations For version 5.1, update to a newer version that contains a fix for this issue, or as a...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in LimeSurvey aka PHPSurveyor 1.49RC2 allow remote attackers to execute arbitrary PHP code via a URL in the homedir parameter to 1 OLE/PPS/File.php, 2 OLE/PPS/Root.php, 3 Spreadsheet/Excel/Writer.php, or 4 OLE/PPS.php in admin/classes/pear/; or 5...

CVE-2007-3632: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in LimeSurvey aka PHPSurveyor 1.49RC2 allow remote attackers to execute arbitrary PHP code via a URL in the homedir parameter to 1 OLE/PPS/File.php, 2 OLE/PPS/Root.php, 3 Spreadsheet/Excel/Writer.php, or 4 OLE/PPS.php in admin/classes/pear/; or 5...

LimeSurvey (PHPSurveyor) 1.49RC2 Remote File Inclusion Vulnerability

No description provided by source. Owner : Pr0T3cT10n Email : [email protected] Homepage : www.kamikaz-team.com Script site : www.limesurvey.org Script name : LimeSurvey PHPSurveyor Version : 1.49RC2 Type : RFIRemote File Include Source :...

CVE-2007-1848: Undefined Security Weakness

Cross-site scripting XSS vulnerability in admin/classes/ui.dta.php in Drake CMS allows remote attackers to inject arbitrary web script or HTML via the desctitle field. NOTE: Drake CMS has only a beta version available, and the vendor has previously stated "We do not consider security reports vali...