Lucene search
K

6 matches found

CNVD
CNVD
added 2018/07/09 12:0 a.m.0 views

Akiee Cross-Site Scripting Vulnerability

Akiee is a cross-platform Markdown-based task manager. A cross-site scripting vulnerability exists in the 'details' of tasks in Akiee version 0.0.3. A remote attacker can exploit this vulnerability to execute arbitrary code by tricking a user into opening a specially crafted liveflow.md file...

6.1CVSS6.4AI score0.00427EPSS
Exploits1References1
OSV
OSV
added 2018/06/26 4:29 p.m.1 views

CVE-2018-1000543

Akiee version 0.0.3 contains a XSS leading to code execution due to the use of node integration vulnerability in "Details" of a task is not validated that can result in XSS leading to abritrary code execution. This attack appear to be exploitable via The attacker tricks the victim into opening a...

6.1CVSS6.1AI score
Exploits0References1
NVD
NVD
added 2018/06/26 4:29 p.m.9 views

CVE-2018-1000543

Akiee version 0.0.3 contains a XSS leading to code execution due to the use of node integration vulnerability in "Details" of a task is not validated that can result in XSS leading to abritrary code execution. This attack appear to be exploitable via The attacker tricks the victim into opening a...

6.1CVSS6.5AI score0.00427EPSS
Exploits1References1
Prion
Prion
added 2018/06/26 4:29 p.m.9 views

Cross site scripting

Akiee version 0.0.3 contains a XSS leading to code execution due to the use of node integration vulnerability in "Details" of a task is not validated that can result in XSS leading to abritrary code execution. This attack appear to be exploitable via The attacker tricks the victim into opening a...

4.3CVSS6.4AI score0.00427EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2018/06/26 4:0 p.m.7 views

CVE-2018-1000543

Akiee version 0.0.3 contains a XSS leading to code execution due to the use of node integration vulnerability in "Details" of a task is not validated that can result in XSS leading to abritrary code execution. This attack appear to be exploitable via The attacker tricks the victim into opening a...

6.5AI score0.00427EPSS
Exploits1References1
CVE
CVE
added 2018/06/26 4:0 p.m.38 views

CVE-2018-1000543

CVE-2018-1000543 affects Akiee version 0.0.3. The vulnerability is a cross-site scripting flaw in the Details of a task, caused by an unvalidated node integration context that can lead to arbitrary code execution. Multiple sources (CNVD-2018-12808, NVD entry) describe exploitation via a crafted m...

6.1CVSS6.4AI score0.00427EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder