1107 matches found
Cross site scripting
LANGO Codeigniter Multilingual Script 1.0 has XSS in the input and upload sections, as demonstrated by the sitename parameter to the admin/settings/update URI...
CVE-2018-18416
CVE-2018-18416 affects the LANGO Codeigniter Multilingual Script 1.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in the input and upload sections, demonstrated via the site_name parameter to the admin/settings/update endpoint. The available connected documents confirm the existence of...
CVE-2018-18416
LANGO Codeigniter Multilingual Script 1.0 has XSS in the input and upload sections, as demonstrated by the sitename parameter to the admin/settings/update URI...
LANGO Codeigniter Multilingual Script 1.0 Cross Site Scripting Vulnerability
LANGO Codeigniter Multilingual Script version 1.0 suffers from html injection and cross site scripting vulnerabilities. Exploit Title: LANGO - Codeigniter Multilingual Script 1.0 - HTML Injection and Stored XSS Exploit Author: Ismail Tasdelen Vendor Homepage: http://pokkho.com/lango/ Software Lin...
LANGO Codeigniter Multilingual Script 1.0 Cross Site Scripting
Exploit Title: LANGO - Codeigniter Multilingual Script 1.0 - HTML Injection and Stored XSS Date: 2018-10-16 Exploit Author: Ismail Tasdelen Vendor Homepage: http://pokkho.com/lango/ Software Link : http://pokkho.com/lango/auth/login Software : LANGO - Codeigniter Multilingual Script Version : 1.0...
DiliCMS Cross-Site Scripting Vulnerability (CNVD-2019-17480)
DiliCMS is a rapid development content management system based on CodeIgniter. DiliCMS has a cross-site scripting vulnerability that can be exploited to inject web scripts and obtain sensitive information via the attachmenturl parameter of admin/index.php/setting/site?tab=siteattachment...
codeigniter-kr.org XSS vulnerability
Open Bug Bounty ID: OBB-637201 Description| Value ---|--- Affected Website:| codeigniter-kr.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
EllisLab CodeIgniter Session Fixation Vulnerability
EllisLab CodeIgniter is the United States EllisLab company for PHP web developers to use a set of application development framework and toolkit . A session fixation vulnerability exists in EllisLab CodeIgniter versions prior to 3.1.9, which stems from the program's failure to properly handle...
Session Fixation
codeigniter/framework is vulnerable to session fixation attacks. The vulnerability exists due to the assumption that session.usestrictmode which was the default behavior of PHP 5.x...
CVE-2018-12071
A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.usestrictmode in the Session Library was mishandled...
Session fixation
A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.usestrictmode in the Session Library was mishandled...
CVE-2018-12071
A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.usestrictmode in the Session Library was mishandled...
CVE-2018-12071
A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.usestrictmode in the Session Library was mishandled...
CVE-2018-12071
Summary (CVE-2018-12071) : CodeIgniter before 3.1.9 is affected by a session fixation vulnerability caused by mishandling of the PHP directive session.use_strict_mode in the Session Library. Multiple connected sources describe this issue consistently (CodeIgniter’s prior to 3.1.9 handling, and ad...
PT-2018-10988 · Ellislab · Codeigniter
Name of the Vulnerable Software and Affected Versions: CodeIgniter versions prior to 3.1.9 Description: A Session Fixation issue exists because session.use strict mode in the Session Library was mishandled. This issue can be exploited due to the mishandling of the session configuration...
EllisLab CodeIgniter SQL Injection Vulnerability
EllisLab CodeIgniter is the United States EllisLab company for PHP web developers to use a set of application development framework and toolkit . A SQL injection vulnerability exists in the offset method of the Active Record class in EllisLab CodeIgniter versions prior to 2.2.4. A remote attacker...
EllisLab CodeIgniter Cross-Site Scripting Vulnerability
EllisLab CodeIgniter is the United States EllisLab company for PHP web developers to use a set of application development framework and toolkit . A security vulnerability exists in the 'xssclean' function in EllisLab CodeIgniter versions prior to 2.1.4. The vulnerability can be exploited by remot...
Code Execution Vulnerability in POCMS Program Version v3.2.0 Backend
POSCMS System is a content management system based on the CodeIgniter framework. A code execution vulnerability exists in the backend of POCMS program version v3.2.0, which can be exploited by an attacker to execute code and thus gain control of the server...
WordPress Users Warned of Malware Masquerading as ionCube Files
Security researchers are warning WordPress and Joomla admins of a sneaky new malware strain masquerading as legitimate ionCube files. The malware, dubbed ionCube Malware, is used by cybercriminals to create backdoors on vulnerable websites allowing them to steal data or plant more malware. In the...