Stored Cross-Site Scripting Vulnerability at jeecms Published Articles

JEECMS is a content management system developed by Jiangxi Jinlei Technology Development Co., Ltd. that supports WeChat applet, WeChat public number/service number, column model, cross-customization of content model, as well as with payment and financial settlement. A stored cross-site scripting...

Open Ticket Request System Information Disclosure Vulnerability

Open Ticket Request System OTRS is an open source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and the service...

charlotteharbortravel.com XSS vulnerability

Open Bug Bounty ID: OBB-376043 Description| Value ---|--- Affected Website:| charlotteharbortravel.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventi...

club300.dk XSS vulnerability

Vulnerable URL: http://www.club300.dk/articles.php?ua=show%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E=84 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1599435 VIP website...

Keychain vulnerability in macOS

On Monday, Patrick Wardle, a respected security researcher at Synack and owner of Objective-See, sent a tweet about a keychain vulnerability he had found in macOS High Sierra. As his tweet showed, it is possible for a malicious app to extract, and then exfiltrate, keychain data from High Sierra,...

mirf.ru XSS vulnerability

Vulnerable URL: http://www.mirf.ru/articles.php?id=4"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 33945 VIP website status:| Yes Check mirf.ru SSL connection:| Grade: A...

Symphony cross-site scripting vulnerability (CNVD-2017-07340)

Symphony is a content management system CMS developed using PHP and MySQL. The system supports search engine optimization, module extensions and more. A cross-site scripting vulnerability exists in the publish/articles/new/ URI in Symphony version 2.6.11. A remote attacker can exploit this...

Smart related articles missing _JEXEC check vulnerability

Smart related articles is a content management system extension. A security vulnerability exists in Smart related articles for Joomla! allows an attacker to fail to block direct requests to dialog.php missing JEXEC check...

Smart related articles cross-site scripting vulnerability

Smart related articles is a content management system extension. A cross-site scripting vulnerability exists in dialog.php in Smart related articles for Joomla!...

Smart related articles SQL Injection Vulnerability

Smart related articles is a content management system extension. An SQL injection vulnerability exists in Smart related articles 'dialog.php' for Joomla! An attacker must use the searchcats variable in the POST method to exploit this vulnerability and obtain sensitive database information...

CVE-2017-7627

The "Smart related articles" extension 1.1 for Joomla! does not prevent direct requests to dialog.php there is a missing JEXEC check...

CVE-2017-7626

The "Smart related articles" extension 1.1 for Joomla! has XSS in dialog.php nart,type in GET Method...

Sql injection

The "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php attacker must use searchcats variable in POST method to exploit this vulnerability...

Type confusion

The "Smart related articles" extension 1.1 for Joomla! has XSS in dialog.php nart,type in GET Method...

Design/Logic Flaw

The "Smart related articles" extension 1.1 for Joomla! does not prevent direct requests to dialog.php there is a missing JEXEC check...

CVE-2017-7628

The "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php attacker must use searchcats variable in POST method to exploit this vulnerability...

CVE-2017-7626

The "Smart related articles" extension 1.1 for Joomla! has XSS in dialog.php nart,type in GET Method...

CVE-2017-7628

The "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php attacker must use searchcats variable in POST method to exploit this vulnerability...

CVE-2017-7628

The "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php attacker must use searchcats variable in POST method to exploit this vulnerability...

CVE-2017-7627

The CVE-2017-7627 issue concerns the Joomla! extension “Smart related articles” (version 1.1). The root cause is a missing _JEXEC check in dialog.php, which permits direct requests bypassing proper initialization. Affected software is the Smart related articles extension for Joomla!, exposing a p...