EUVD-2015-8356

Malware in sbrugna...

EUVD-2020-23848

Malware in sbrugna...

EUVD-2014-2037

Malware in sbrugna...

EUVD-2006-2478

Malware in sbrugna...

CVE-2020-36306

Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the backurl field...

SUSE CVE-2014-1985

Open redirect vulnerability in the redirectbackordefault function in app/controllers/applicationcontroller.rb in Redmine before 2.4.5 and 2.5.x before 2.5.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the back url backurl parameter...

CVE-2022-41679

Forma LMS version 3.1.0 and earlier are affected by an Cross-Site scripting vulnerability, that could allow a remote attacker to inject javascript code on the “backurl” parameter in appLms/index.php?modname=faq&op=play function. The exploitation of this vulnerability could allow an attacker to...

Cross site scripting

Forma LMS version 3.1.0 and earlier are affected by an Cross-Site scripting vulnerability, that could allow a remote attacker to inject javascript code on the “backurl” parameter in appLms/index.php?modname=faq&op=play function. The exploitation of this vulnerability could allow an attacker to...

CVE-2022-41679 Cross-site scripting in Forma LMS version

Forma LMS version 3.1.0 and earlier are affected by an Cross-Site scripting vulnerability, that could allow a remote attacker to inject javascript code on the “backurl” parameter in appLms/index.php?modname=faq&op=play function. The exploitation of this vulnerability could allow an attacker to...

Cross-site Scripting (XSS)

Redmine is vulnerable to cross-site scripting. An attacker is able to inject malicious script via the backurl field...

CVE-2020-36306

Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the backurl field...

DEBIAN-CVE-2020-36306

Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the backurl field...

CVE-2020-36306

Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the backurl field...

Cross site scripting

Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the backurl field...

CVE-2020-36306

Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the backurl field...

UBUNTU-CVE-2020-36306

Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the backurl field...

CVE-2020-36306

Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the backurl field...

CVE-2020-36306

Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the backurl field...

Mail.ru: REFLECTED XSS On http://jsgames.mail.ru/bad_browser.php via back_url paramter

Reflected XSS in jsgames.mail.ru via GET paramter...

DEBIAN-CVE-2015-8474

Open redirect vulnerability in the validbackurl function in app/controllers/applicationcontroller.rb in Redmine before 2.6.7, 3.0.x before 3.0.5, and 3.1.x before 3.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted backurl parameter, a...