EUVD-2015-1502

Malware in sbrugna...

CVE-2015-1364

SQL injection vulnerability in the getProfile function in system/profile.functions.php in Free Reprintables ArticleFR 3.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter to register/...

Sql injection

SQL injection vulnerability in the getProfile function in system/profile.functions.php in Free Reprintables ArticleFR 3.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter to register/...

Cross site scripting

Cross-site scripting XSS vulnerability in Free Reprintables ArticleFR 3.0.5 allows remote attackers to inject arbitrary web script or HTML via the q parameter to search/v/...

CVE-2015-1363

CVE-2015-1363 concerns Free Reprintables ArticleFR CMS 3.0.5. Affected component: search/v/ query parameter q. Underlying issue: cross-site scripting (XSS) allowing remote attackers to inject arbitrary script/HTML. Impact as per sources: script execution in the victim’s browser. Exploitation cont...