EUVD-2014-5152

Malware in sbrugna...

CVE-2014-5259

Cross-site scripting XSS vulnerability in cattranslate.php in the CatTranslate JQuery plugin in BlackCat CMS 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in cattranslate.php in the CatTranslate JQuery plugin in BlackCat CMS 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2014-5259

CVE-2014-5259 is a reflected XSS in BlackCat CMS up to version 1.0.3, caused by insufficient sanitization of the GET parameter “msg” passed to /modules/lib_jquery/plugins/cattranslate/cattranslate.php. A remote attacker can entice a logged-in user to open a crafted link and execute arbitrary HTML...

BlackCat CMS 1.0.3 Cross Site Scripting Vulnerability

BlackCat CMS version 1.0.3 suffers from a cross site scripting vulnerability. Product: BlackCat CMS Vendor: Black Cat Development Vulnerable Versions: 1.0.3 and probably prior Tested Version: 1.0.3 Advisory Publication: August 13, 2014 without technical details Vendor Notification: August 13, 201...