EUVD-2018-13118

Malware in sbrugna...

Ecommerce-CodeIgniter-Bootstrap Cross-Site Scripting Vulnerability

Ecommerce-CodeIgniter-Bootstrap is a responsive, multi-vendor, multi-language online store platform shopping cart solution. Ecommerce-CodeIgniter-Bootstrap suffers from a cross-site scripting vulnerability that stems from cross-site scripting vulnerabilities in the searchtitle, catName, sub, name...

CVE-2018-20562

An issue was discovered in DouCo DouPHP 1.5 20181221. admin/articlecategory.php?rec=update has XSS via the catname parameter...

PT-2018-15434

Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP, where the "admin/product category.php?rec=update" API endpoint has a cross-site scripting XSS issue via the cat name parameter. Recommendations For DouPHP version...

PT-2018-15432

Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP, where the "admin/article category.php?rec=update" API endpoint has a cross-site scripting XSS issue via the cat name parameter. Recommendations For DouPHP version...

CVE-2015-2289

Cross-site scripting XSS vulnerability in templates/2k11/admin/entries.tpl in Serendipity before 2.0.1 allows remote authenticated editors to inject arbitrary web script or HTML via the serendipitycatname parameter to serendipityadmin.php, when creating a new category...

PT-2015-5697

Name of the Vulnerable Software and Affected Versions Serendipity versions prior to 2.0.1 Description A cross-site scripting XSS issue exists, allowing remote authenticated editors to inject arbitrary web script or HTML. This is achieved via the serendipitycatname parameter to the "serendipity...

CVE-2015-2289: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in templates/2k11/admin/entries.tpl in Serendipity before 2.0.1 allows remote authenticated editors to inject arbitrary web script or HTML via the serendipitycatname parameter to serendipityadmin.php, when creating a new category...

PT-2011-1839

Name of the Vulnerable Software and Affected Versions Joomla! component com aardvertiser versions 2.1 through 2.1.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cat name parameter in a view action to "index.php". Recommendations For...