EUVD-2018-8193

Malware in sbrugna...

EUVD-2018-2369

Malware in sbrugna...

ChemCMS Cross-Site Scripting Vulnerability

ChemCMS is a chemical-based web content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in ChemCMS version 1.0.6, which can be exploited by remote attackers to insert and execute JavaScript code with the help of the 'Settings-Site Info' field...

CVE-2018-16346

ChemCMS 1.0.6 has XSS via the "setting - website information" field...

CVE-2018-16346

ChemCMS 1.0.6 has XSS via the "setting - website information" field...

Design/Logic Flaw

ChemCMS 1.0.6 has XSS via the "setting - website information" field...

CVE-2018-16346

ChemCMS 1.0.6 has XSS via the "setting - website information" field...

CVE-2018-16346

ChemCMS 1.0.6 is affected by a Cross-Site Scripting (XSS) vulnerability exploitable via the Settings → Site Info field. Connected CNVD and NVD records confirm the vulnerability affecting version 1.0.6 and describe the attack as injecting/executing JavaScript through the Site Info setting; no patc...

ChemCMS Cross-Site Request Forgery Vulnerability

ChemCMS is a chemical-based web content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in ChemCMS version 1.0.6. A remote attacker can exploit this vulnerability to add an administrator account via the public/admin/user/addpost.html page...

CVE-2018-10295

ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account...

CVE-2018-10295

ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account...

Cross site request forgery (csrf)

ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account...

CVE-2018-10295

CVE-2018-10295 affects ChemCMS v1.0.6. The vulnerability is a Cross-Site Request Forgery (CSRF) that can be exploited via the public/admin/user/addpost.html page to add an administrator account. This could enable an attacker to gain admin privileges on the affected system. The documents do not pr...

CVE-2018-10295

ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account...