9 matches found
CVE-2018-19919
Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php datatitle parameter, as demonstrated by a crafted onload attribute of an SVG element...
CVE-2018-19919
Pixelimity 1.0 is affected by CVE-2018-19919: a persistent XSS flaw in the admin/portfolio.php data[title] parameter, demonstrated by a crafted onload attribute in an SVG element. This indicates that enabling arbitrary HTML/JS injection could occur through the title field when rendering the admin...
CVE-2018-19919
Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php datatitle parameter, as demonstrated by a crafted onload attribute of an SVG element...
PT-2018-15164
Name of the Vulnerable Software and Affected Versions Pixelimity version 1.0 Description The issue is related to Persistent XSS, which can be exploited via the datatitle parameter in the "admin/portfolio.php" endpoint. This is demonstrated by a crafted onload attribute of an SVG element...
CVE-2018-19919: Improper Neutralization of Input During Web Page Generation
Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php datatitle parameter, as demonstrated by a crafted onload attribute of an SVG element...
CVE-2018-15848: Cross-Site Request Forgery (CSRF)
An issue was discovered in portfolioCMS 1.0.5. There is CSRF to create new pages via admin/portfolio.php?newpage=true...
CVE-2018-12263: Unrestricted Upload of File with Dangerous Type
portfolioCMS 1.0.5 allows upload of arbitrary .php files via the admin/portfolio.php?newpage=true URI...