EUVD-2019-17822

Malware in sbrugna...

EUVD-2019-17824

Malware in sbrugna...

Code injection

In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter...

CVE-2019-8432

In CmsEasy 7.0, there is XSS via the ckplayer.php url parameter...

CVE-2019-8434

In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter...

CVE-2019-8434

In CmsEasy 7.0, CVE-2019-8434 describes a cross-site scripting (XSS) vulnerability triggered by the ckplayer.php autoplay parameter. The vulnerability targets the web application component handling that parameter and can lead to script execution in a victim’s browser. Metrics indicate a network-a...

CVE-2019-8434

In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter...

CVE-2019-8434: Improper Neutralization of Input During Web Page Generation

In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter...

PT-2019-19032

Name of the Vulnerable Software and Affected Versions CmsEasy version 7.0 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs via the url parameter in the ckplayer.php API endpoint. Recommendations For CmsEasy version 7.0, consider restricting access to the...

PT-2019-19034

Name of the Vulnerable Software and Affected Versions CmsEasy version 7.0 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs via the autoplay parameter in the ckplayer.php file. Recommendations For CmsEasy version 7.0, consider restricting access to the ckplayer.php...

CVE-2019-8432: Improper Neutralization of Input During Web Page Generation

In CmsEasy 7.0, there is XSS via the ckplayer.php url parameter...

CVE-2019-8432

CmsEasy 7.0 is affected by a cross-site scripting (XSS) vulnerability in the ckplayer.php URL parameter. The issue is documented across multiple sources (NVD, Red Hat, CVE lists) as an XSS in CmsEasy 7.0 via ckplayer.php, but no further technical specifics (such as exact code path, exploit detail...