EUVD-2019-17090

Malware in sbrugna...

Cantemo Portal Cross-Site Scripting Vulnerability

Cantemo Portal is a media asset management portal system from the Cantemo team in Sweden. The system is primarily used to manage media files such as video, audio and still images. A cross-site scripting vulnerability exists in Cantemo Portal versions prior to 3.2.13, 3.3.x prior to 3.3.8, and 3.4...

CVE-2019-7551

Cantemo Portal before 3.2.13, 3.3.x before 3.3.8, and 3.4.x before 3.4.9 has XSS. Leveraging this vulnerability would enable performing actions as users, including administrative users. This could enable account creation and deletion as well as deletion of information contained within the app...

Arbitrary file deletion

Cantemo Portal before 3.2.13, 3.3.x before 3.3.8, and 3.4.x before 3.4.9 has XSS. Leveraging this vulnerability would enable performing actions as users, including administrative users. This could enable account creation and deletion as well as deletion of information contained within the app...

CVE-2019-7551

Cantemo Portal before 3.2.13, 3.3.x before 3.3.8, and 3.4.x before 3.4.9 has XSS. Leveraging this vulnerability would enable performing actions as users, including administrative users. This could enable account creation and deletion as well as deletion of information contained within the app...

CVE-2019-7551

Cantemo Portal before 3.2.13, 3.3.x before 3.3.8, and 3.4.x before 3.4.9 has XSS. Leveraging this vulnerability would enable performing actions as users, including administrative users. This could enable account creation and deletion as well as deletion of information contained within the app...

CVE-2019-7551

Cantemo Portal suffers XSS in versions prior to 3.2.13 (and 3.3.x prior to 3.3.8, 3.4.x prior to 3.4.9). The vulnerability allows an attacker to execute client-side code and perform actions as other users, including administrators (e.g., account creation/deletion, data deletion). The CNVD entry a...

CVE-2019-7551: Improper Neutralization of Input During Web Page Generation

Cantemo Portal before 3.2.13, 3.3.x before 3.3.8, and 3.4.x before 3.4.9 has XSS. Leveraging this vulnerability would enable performing actions as users, including administrative users. This could enable account creation and deletion as well as deletion of information contained within the app...

PT-2019-18642

Name of the Vulnerable Software and Affected Versions Cantemo Portal versions prior to 3.2.13 Cantemo Portal versions 3.3.x prior to 3.3.8 Cantemo Portal versions 3.4.x prior to 3.4.9 Description The issue allows for cross-site scripting XSS, which can be leveraged to perform actions as users,...