7 matches found
CVE-2017-6812
paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.vote.php id parameter...
CVE-2017-6812
paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.vote.php id parameter...
Cross site scripting
paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.vote.php id parameter...
CVE-2017-6812
paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.vote.php id parameter...
CVE-2017-6812
MaNGOSWebV4 4.0.8 is affected by a reflected XSS in inc/admin/template_files/admin.vote.php (id parameter). The vulnerability stems from unsanitized input echoed back to the page, enabling arbitrary script execution if a user visits a crafted URL. Affected product is MaNGOSWebV4; no vendor versio...
PT-2017-17343
Name of the Vulnerable Software and Affected Versions paintballrefjosh/MaNGOSWebV4 version 4.0.8 Description The issue concerns a reflected XSS in the inc/admin/template files/admin.vote.php file, specifically affecting the id parameter. Recommendations For version 4.0.8, consider restricting...
CVE-2017-6812: Improper Neutralization of Input During Web Page Generation
paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.vote.php id parameter...