546 matches found
CVE-2017-17950
Cells Blog 3.5 has SQL Injection via the pubreadpost.php ptid parameter...
CVE-2017-17949
Cells Blog 3.5 has XSS via the pubreadpost.php fmid parameter...
CVE-2017-17948
Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request...
Sql injection
Cells Blog 3.5 has SQL Injection via the pubreadpost.php ptid parameter...
CVE-2017-17948
Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request...
CVE-2017-17949
Cells Blog 3.5 has XSS via the pubreadpost.php fmid parameter...
CVE-2017-17950
Cells Blog 3.5 has SQL Injection via the pubreadpost.php ptid parameter...
CVE-2017-17948
Cells Blog 3.5 is affected by a Cross‑Site Scripting (XSS) vulnerability that can be triggered via the jfdname parameter in an act=showpic request. Multiple sources (NVD/NVD mirror, CNVD, Red Hat advisory, CNVD) corroborate the issue, describing XSS in Cells Blog 3.5 and the jfdname parameter pat...
CVE-2017-17949
CVE-2017-17949 applies to Cells Blog 3.5. The vulnerability is a Cross-Site Scripting (XSS) flaw exploited via the pub_readpost.php fmid parameter. The connected sources confirm XSS in Cells Blog 3.5 and describe the vulnerability vector, without providing a specific patch/version, workarounds, o...
CVE-2017-17950
CVE-2017-17950 affects Cells Blog 3.5, where the pub_readpost.php ptid parameter enables SQL injection via user-supplied input. The vulnerability’s impact is described in multiple sources (e.g., NVD and CNVD) as allowing unauthorized access to data with partial to high severity. Exploitation deta...
CVE-2017-17950: Improper Neutralization of Special Elements used in an SQL Command
Cells Blog 3.5 has SQL Injection via the pubreadpost.php ptid parameter...
CVE-2017-17949: Improper Neutralization of Input During Web Page Generation
Cells Blog 3.5 has XSS via the pubreadpost.php fmid parameter...
CVE-2017-17948: Improper Neutralization of Input During Web Page Generation
Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request...
PT-2017-15119
Name of the Vulnerable Software and Affected Versions Cells Blog version 3.5 Description The issue allows for XSS via the jfdname parameter in an "act=showpic" request. Recommendations For version 3.5, avoid using the jfdname parameter in the "act=showpic" request until the issue is resolved...
PT-2017-15120
Name of the Vulnerable Software and Affected Versions Cells Blog version 3.5 Description The issue is related to a security problem where an attacker can inject malicious code. The fmid parameter in the "pub readpost.php" endpoint is vulnerable to this type of attack. Recommendations For Cells Bl...
PT-2017-15121
Name of the Vulnerable Software and Affected Versions Cells Blog version 3.5 Description The issue is related to SQL Injection, which can be exploited via the ptid parameter in the "pub readpost.php" endpoint. Recommendations For Cells Blog version 3.5, update to a newer version that contains a f...
Cells Blog 3.5 - bgid fmid fnid SQL Injection
Cells Blog 3.5 - bgid fmid fnid SQL Injection Exploit Title: Cells Blog 3.5 - SQL Injection Dork: N/A Date: 16.12.2017 Vendor Homepage: http://www.cells.tw/ Software Link: http://www.cells.tw/cells/ Version: 3.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsan Senc...
Cells Blog 3.5 - 'bgid' / 'fmid' / 'fnid' SQL Injection
Exploit Title: Cells Blog 3.5 - SQL Injection Dork: N/A Date: 16.12.2017 Vendor Homepage: http://www.cells.tw/ Software Link: http://www.cells.tw/cells/ Version: 3.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsan Sencan Author Web: http://ihsan.net Author Social:...
UBUNTU-CVE-2017-8819
In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, the replay-cache protection mechanism is ineffective for v2 onion services, aka TROVE-2017-009. An attacker can send many INTRODUCE2 cells to trigger this issue...
CVE-2017-8819
In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, the replay-cache protection mechanism is ineffective for v2 onion services, aka TROVE-2017-009. An attacker can send many INTRODUCE2 cells to trigger this issue...