CVE-2017-16956

b3log Symphony aka Sym 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title...

Cross site scripting

b3log Symphony aka Sym 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title...

CVE-2017-16956

b3log Symphony aka Sym 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title...

PT-2017-14658

Name of the Vulnerable Software and Affected Versions b3log Symphony aka Sym version 2.2.0 Description The issue allows for an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title. Recommendations For version 2.2.0, as a temporary...

CVE-2017-16956: Improper Neutralization of Input During Web Page Generation

b3log Symphony aka Sym 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title...

SQL Injection Vulnerability in JYmusic ArticleController.php Page

JYmusic is an open source cross-platform music management system. A SQL injection vulnerability exists in the JYmusic ArticleController.php page. Allow attackers to exploit the vulnerability to obtain sensitive database information...

PT-2017-6711

Name of the Vulnerable Software and Affected Versions Fiyo CMS version 2.0 1.9.1 Description The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter to the "apps/app article/controller/rating.php"...

SQL injection vulnerability in SaxueArticle article management system money.php page

SaxueArticle article management system is a php+MySQL for the development of php article management system. A SQL injection vulnerability exists in the money.php page of the SaxueArticle article management system. The vulnerability stems from the program's failure to adequately filter...

SQL Injection Vulnerability in SaxueArticle Article Management System artcle.php Page

SaxueArticle article management system is a php+MySQL for the development of php article management system. SaxueArticle article management system artcle.php page SQL injection vulnerability, the vulnerability stems from the program on the user to provide input is not sufficiently filtered, an...

SQL injection vulnerability in article.class.php page of UQCMS cloud commerce system

UQCMS cloud business system is a B2B2C e-commerce software with the program using PHP+MYSQL and the template using smarty template. UQCMS cloud business system article.class.php page SQL injection vulnerability, the vulnerability stems from the program does not adequately filter the input submitt...

2017-11 Security Monthly Quality Rollup for Windows Embedded 8 Standard for x64-based Systems (KB4048959)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2017-11 Cumulative Update for Windows 10 Version 1511 for x64-based Systems (KB4048952)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2017-11 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4048955)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Cross site scripting

PluXml version 5.6 is vulnerable to stored cross-site scripting vulnerability, within the article creation page, which can result in escalation of privileges...

UBUNTU-CVE-2017-1001001

PluXml version 5.6 is vulnerable to stored cross-site scripting vulnerability, within the article creation page, which can result in escalation of privileges...

CVE-2017-1001001

PluXml version 5.6 is vulnerable to stored cross-site scripting vulnerability, within the article creation page, which can result in escalation of privileges...

CVE-2017-1001001

PluXml version 5.6 is vulnerable to stored cross-site scripting vulnerability, within the article creation page, which can result in escalation of privileges...

CVE-2017-1001001

PluXml version 5.6 is vulnerable to stored cross-site scripting vulnerability, within the article creation page, which can result in escalation of privileges...

CVE-2017-1001001

Removed by vendor...

CVE-2017-1001001: Improper Neutralization of Input During Web Page Generation

PluXml version 5.6 is vulnerable to stored cross-site scripting vulnerability, within the article creation page, which can result in escalation of privileges...