56 matches found
CVE-2020-25470
AntSword 2.1.8.1 contains a cross-site scripting XSS vulnerability in the View Site funtion. When viewing an added site, an XSS payload can be injected in cookies view which can lead to remote code execution...
PT-2020-16090
Name of the Vulnerable Software and Affected Versions AntSword version 2.1.8.1 Description The issue concerns a cross-site scripting XSS vulnerability in the View Site function. When viewing an added site, an XSS payload can be injected in the cookies view, potentially leading to remote code...
CVE-2020-18766: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability AntSword v2.0.7 can remotely execute system commands...
CVE-2020-25470: Improper Neutralization of Input During Web Page Generation
AntSword 2.1.8.1 contains a cross-site scripting XSS vulnerability in the View Site funtion. When viewing an added site, an XSS payload can be injected in cookies view which can lead to remote code execution...
PT-2020-15134
Name of the Vulnerable Software and Affected Versions AntSword version 2.0.7 Description A cross-site scripting XSS vulnerability allows remote execution of system commands. Recommendations For AntSword version 2.0.7, update to a newer version that contains a fix for this issue, if available. At...
antSword
This is a comprehensive analysis of the provided code and metadata from the AntSword repository. Classification: Exploit module/toolkit targeting web applications Primary CVE ID: Not specified Target product/service or framework: Web applications Vulnerability class/vector: Not specified Probable...
antSword Cross-Site Scripting Vulnerability
antSword is an open source cross-platform website management tool. A cross-site scripting vulnerability exists in the database configuration in versions of antSword prior to 2.1.0. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can...
CVE-2019-13970
In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js...
CVE-2019-13970
In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js...
Code injection
In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js...
CVE-2019-13970
CVE-2019-13970 affects antSword before 2.1.0. A self-XSS vulnerability in the database configuration leads to code execution through the modules: modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js. Impact is described as co...
CVE-2019-13970
In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js...
CVE-2019-13970
In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js...
PT-2019-13499
Name of the Vulnerable Software and Affected Versions antSword versions prior to 2.1.0 Description The issue is related to self-XSS in the database configuration, which can lead to code execution. This is possible via files such as modules/database/asp/index.js, modules/database/custom/index.js,...
CVE-2019-13970: Improper Neutralization of Input During Web Page Generation
In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js...
