CVE-2018-20627

PHP Scripts Mall Consumer Reviews Script 4.0.3 has HTML injection via the search box...

CVE-2018-20627

PHP Scripts Mall Consumer Reviews Script 4.0.3 has HTML injection via the search box...

CVE-2018-20627

CVE-2018-20627 concerns PHP Scripts Mall Consumer Reviews Script 4.0.3, where an HTML injection vulnerability is reported via the search box. The available connected documents confirm the affected product and the attack surface but do not provide concrete details on exploit specifics, affected ve...

PT-2019-10122

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Consumer Reviews Script version 4.0.3 Description: The issue concerns HTML injection via the search box, allowing potential malicious activities. Recommendations: For PHP Scripts Mall Consumer Reviews Script version 4.0.3,...

CVE-2018-20627: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Consumer Reviews Script 4.0.3 has HTML injection via the search box...

Microsoft Windows - '.reg' File / Dialog Box Message Spoofing

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-.REG-FILE-DIALOG-BOX-MESSAGE-SPOOFING.txt + ISR: ApparitionSec Vendor www.microsoft.com Product A file with the .reg file extension is a Registration file...

Microsoft Windows .Reg File / Dialog Box Message Spoofing Exploit

The Windows registry editor allows specially crafted .reg filenames to spoof the default registry dialog warning box presented to an end user. This can potentially trick unsavvy users into choosing the wrong selection shown on the dialog box. Furthermore, we can deny the registry editor its abili...

Microsoft Windows .Reg File / Dialog Box Message Spoofing

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-.REG-FILE-DIALOG-BOX-MESSAGE-SPOOFING.txt + ISR: ApparitionSec Vendor www.microsoft.com Product A file with the .reg file extension is a Registration file...

DiliCMS Cross-Site Scripting Vulnerability (CNVD-2019-07939)

DiliCMS is a content management system CMS based on Codelgniter. A cross-site scripting vulnerability exists in the site URL text box in DiliCMS version 2.4.0. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Kudou Music Box PC client software suffers from a dll file loading vulnerability

Kudou Music Box is a music resource aggregator and player that combines the functions of song and MV search, download, online playback, lyrics synchronization display and so on. A dll file loading vulnerability exists in the Kudou Music Box PC client software, which can be exploited by attackers ...

CVE-2018-17420

An issue was discovered in ZrLog 2.0.3. There is a SQL injection vulnerability in the article management search box via the keywords parameter...

CVE-2018-17418: Unrestricted Upload of File with Dangerous Type

Monstra CMS 3.0.4 allows remote attackers to execute arbitrary PHP code via a mixed-case file extension, as demonstrated by the 123.PhP filename, because plugins\box\filesmanager\filesmanager.admin.php mishandles the forbiddentypes variable...

CVE-2018-17420: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in ZrLog 2.0.3. There is a SQL injection vulnerability in the article management search box via the keywords parameter...

PT-2019-5750 · Poppler +4 · Poppler +4

Name of the Vulnerable Software and Affected Versions: Poppler version 0.74.0 Description: The issue is related to a heap-based buffer over-read in the downsample row box filter function located in CairoRescaleBox.cc. This can potentially allow a remote attacker to access confidential data,...

Workspace: Personal Cloud Connectors

This article provides the steps necessary to utilize connectors for Box, Dropbox, and other third-party storage apps in Citrix Workspace...

CVE-2019-8911

An issue was discovered in WTCMS 1.0. It has stored XSS via the third text box for the website statistics code...

PT-2019-19255

Name of the Vulnerable Software and Affected Versions WTCMS version 1.0 Description An issue was discovered that allows stored XSS via the third text box, which is used for the website statistics code. Recommendations For WTCMS version 1.0, consider disabling the third text box for website...

CVE-2019-8911: Improper Neutralization of Input During Web Page Generation

An issue was discovered in WTCMS 1.0. It has stored XSS via the third text box for the website statistics code...

WECON V-Box Detection (Windows SMB Login)

Detects the installed version of WECON V-Box for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-5596

In FreeBSD 11.2-STABLE after r338618 and before r343786, 12.0-STABLE before r343781, and 12.0-RELEASE before 12.0-RELEASE-p3, a bug in the reference count implementation for UNIX domain sockets can cause a file structure to be incorrectly released potentially allowing a malicious local user to ga...