4232 matches found
CVE-2018-11679
An issue was discovered in CmsEasy 6.120180508. There is a CSRF vulnerability that can add an article via /index.php?case=table&act=add&table=archive&admindir=admin...
PT-2018-10743
Name of the Vulnerable Software and Affected Versions CmsEasy version 6.1 20180508 Description A CSRF issue allows adding an article via the /index.php?case=table&act=add&table=archive&admin dir=admin endpoint. Recommendations For CmsEasy version 6.1 20180508, as a temporary workaround, consider...
SQL Injection Vulnerability in phpaaCMS Multiple Pages
phpaaCMS is a simple article management system. A SQL injection vulnerability exists in several pages of phpaaCMS. An attacker can exploit the vulnerability to obtain sensitive database information...
Stored Cross-Site Scripting Vulnerability in Backdrop CMS Published Article Pages
Backdrop CMS is a foreign open source, free CMS system for small and medium-sized businesses and non-profit organizations. A stored cross-site scripting vulnerability exists in the Backdrop CMS publish article page. An attacker can insert malicious js code into the page to obtain user cookies and...
idreamsoft iCMS Cross-Site Request Forgery Vulnerability (CNVD-2018-09388)
idreamsoft iCMS is an open source content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in idreamsoft iCMS version 7.0. A remote attacker can add Column with the help of /admincp.php?app=articlecategory&do=save&frame=iPHP to exploit the...
RHEL 7 : kernel (RHSA-2018:1318)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1318 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: Kernel: KVM: error in exception handli...
2018-05 Security Update for Adobe Flash Player for Windows 10 Version 1803 for ARM64-based Systems (KB4103729)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2018-05 Security Update for Adobe Flash Player for Windows 8.1 for x86-based Systems (KB4103729)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2018-05 Security Update for Adobe Flash Player for Windows 8.1 for x64-based Systems (KB4103729)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2018-05 Security Update for Adobe Flash Player for Windows Server 2016 for x64-based Systems (KB4103729)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2018-05 Security Update for Adobe Flash Player for Windows 10 Version 1607 for x64-based Systems (KB4103729)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2018-05 Cumulative Update for Windows 10 Version 1709 for ARM64-based Systems (KB4103727)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2018-05 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4103727)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2018-05 Cumulative Update for Windows 10 Version 1803 for x86-based Systems (KB4103721)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
CVE-2018-10758
The edit/ URI in Datenstrom Yellow 0.7.3 has CSRF via a delete action that can delete articles...
Configuring Imperva SecureSphere for GDPR Compliance: Part One
Time is running out. 23 days until GDPR enforcement The GDPR effective date is less than a month away and, given the significant risk and potential costs associated with a failure to comply, organizational readiness efforts continue to mount. GDPR non-compliance penalties can be severe up to 79...
Cross site scripting
EasyCMS 1.3 is prone to Stored XSS when posting an article; four fields are affected: title, keyword, abstract, and content, as demonstrated by the /admin/index/index.htmllistarticle URI...
CVE-2018-10527
EasyCMS 1.3 is prone to Stored XSS when posting an article; four fields are affected: title, keyword, abstract, and content, as demonstrated by the /admin/index/index.htmllistarticle URI...
