CVE-2018-18416

CVE-2018-18416 affects the LANGO Codeigniter Multilingual Script 1.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in the input and upload sections, demonstrated via the site_name parameter to the admin/settings/update endpoint. The available connected documents confirm the existence of...

CVE-2018-18416

LANGO Codeigniter Multilingual Script 1.0 has XSS in the input and upload sections, as demonstrated by the sitename parameter to the admin/settings/update URI...

PT-2018-14447

Name of the Vulnerable Software and Affected Versions LANGO Codeigniter Multilingual Script version 1.0 Description The issue concerns a security problem where an attacker can inject malicious code. Specifically, the site name parameter in the "admin/settings/update" API endpoint is vulnerable...

CVE-2018-18416: Improper Neutralization of Input During Web Page Generation

LANGO Codeigniter Multilingual Script 1.0 has XSS in the input and upload sections, as demonstrated by the sitename parameter to the admin/settings/update URI...

LANGO Codeigniter Multilingual Script 1.0 Cross Site Scripting

Exploit Title: LANGO - Codeigniter Multilingual Script 1.0 - HTML Injection and Stored XSS Date: 2018-10-16 Exploit Author: Ismail Tasdelen Vendor Homepage: http://pokkho.com/lango/ Software Link : http://pokkho.com/lango/auth/login Software : LANGO - Codeigniter Multilingual Script Version : 1.0...

LANGO Codeigniter Multilingual Script 1.0 Cross Site Scripting Vulnerability

LANGO Codeigniter Multilingual Script version 1.0 suffers from html injection and cross site scripting vulnerabilities. Exploit Title: LANGO - Codeigniter Multilingual Script 1.0 - HTML Injection and Stored XSS Exploit Author: Ismail Tasdelen Vendor Homepage: http://pokkho.com/lango/ Software Lin...

DiliCMS Cross-Site Scripting Vulnerability (CNVD-2019-17480)

DiliCMS is a rapid development content management system based on CodeIgniter. DiliCMS has a cross-site scripting vulnerability that can be exploited to inject web scripts and obtain sensitive information via the attachmenturl parameter of admin/index.php/setting/site?tab=siteattachment...

codeigniter-kr.org XSS vulnerability

Open Bug Bounty ID: OBB-637201 Description| Value ---|--- Affected Website:| codeigniter-kr.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

EllisLab CodeIgniter Session Fixation Vulnerability

EllisLab CodeIgniter is the United States EllisLab company for PHP web developers to use a set of application development framework and toolkit . A session fixation vulnerability exists in EllisLab CodeIgniter versions prior to 3.1.9, which stems from the program's failure to properly handle...

Session Fixation

codeigniter/framework is vulnerable to session fixation attacks. The vulnerability exists due to the assumption that session.usestrictmode which was the default behavior of PHP 5.x...

CVE-2018-12071

A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.usestrictmode in the Session Library was mishandled...

Session fixation

A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.usestrictmode in the Session Library was mishandled...

CVE-2018-12071

A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.usestrictmode in the Session Library was mishandled...

CVE-2018-12071

A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.usestrictmode in the Session Library was mishandled...

CVE-2018-12071

A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.usestrictmode in the Session Library was mishandled...

CVE-2018-12071

Summary (CVE-2018-12071) : CodeIgniter before 3.1.9 is affected by a session fixation vulnerability caused by mishandling of the PHP directive session.use_strict_mode in the Session Library. Multiple connected sources describe this issue consistently (CodeIgniter’s prior to 3.1.9 handling, and ad...

CVE-2018-12071: Session Fixation

A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.usestrictmode in the Session Library was mishandled...

PT-2018-10988 · Ellislab · Codeigniter

Name of the Vulnerable Software and Affected Versions: CodeIgniter versions prior to 3.1.9 Description: A Session Fixation issue exists because session.use strict mode in the Session Library was mishandled. This issue can be exploited due to the mishandling of the session configuration...

EllisLab CodeIgniter Cross-Site Scripting Vulnerability

EllisLab CodeIgniter is the United States EllisLab company for PHP web developers to use a set of application development framework and toolkit . A security vulnerability exists in the 'xssclean' function in EllisLab CodeIgniter versions prior to 2.1.4. The vulnerability can be exploited by remot...

EllisLab CodeIgniter SQL Injection Vulnerability

EllisLab CodeIgniter is the United States EllisLab company for PHP web developers to use a set of application development framework and toolkit . A SQL injection vulnerability exists in the offset method of the Active Record class in EllisLab CodeIgniter versions prior to 2.2.4. A remote attacker...