EUVD-2018-8193

Malware in sbrugna...

EUVD-2018-2369

Malware in sbrugna...

ChemCMS Cross-Site Scripting Vulnerability

ChemCMS is a chemical-based web content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in ChemCMS version 1.0.6, which can be exploited by remote attackers to insert and execute JavaScript code with the help of the 'Settings-Site Info' field...

CVE-2018-16346

ChemCMS 1.0.6 has XSS via the "setting - website information" field...

CVE-2018-16346

ChemCMS 1.0.6 has XSS via the "setting - website information" field...

Design/Logic Flaw

ChemCMS 1.0.6 has XSS via the "setting - website information" field...

CVE-2018-16346

ChemCMS 1.0.6 has XSS via the "setting - website information" field...

CVE-2018-16346

ChemCMS 1.0.6 is affected by a Cross-Site Scripting (XSS) vulnerability exploitable via the Settings → Site Info field. Connected CNVD and NVD records confirm the vulnerability affecting version 1.0.6 and describe the attack as injecting/executing JavaScript through the Site Info setting; no patc...

PT-2018-13506

Name of the Vulnerable Software and Affected Versions ChemCMS version 1.0.6 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs via the "setting - website information" field, which allows for the injection of malicious scripts. Recommendations For ChemCMS version...

CVE-2018-16346: Improper Neutralization of Input During Web Page Generation

ChemCMS 1.0.6 has XSS via the "setting - website information" field...

ChemCMS Cross-Site Request Forgery Vulnerability

ChemCMS is a chemical-based web content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in ChemCMS version 1.0.6. A remote attacker can exploit this vulnerability to add an administrator account via the public/admin/user/addpost.html page...

Cross site request forgery (csrf)

ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account...

CVE-2018-10295

ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account...

CVE-2018-10295

ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account...

CVE-2018-10295

CVE-2018-10295 affects ChemCMS v1.0.6. The vulnerability is a Cross-Site Request Forgery (CSRF) that can be exploited via the public/admin/user/addpost.html page to add an administrator account. This could enable an attacker to gain admin privileges on the affected system. The documents do not pr...

CVE-2018-10295

ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account...

CVE-2018-10295: Cross-Site Request Forgery (CSRF)

ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account...

PT-2018-9805

Name of the Vulnerable Software and Affected Versions: ChemCMS version 1.0.6 Description: The issue allows for CSRF by utilizing the "public/admin/user/addpost.html" endpoint to add an administrator account. Recommendations: For ChemCMS version 1.0.6, consider implementing proper CSRF protection...