Cross site scripting

Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 because session cookies lack the HttpOnly flag. The impact is account takeover...

CVE-2020-7051

Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 because session cookies lack the HttpOnly flag. The impact is account takeover...

CVE-2020-7051

Codologic Codoforum is affected up to version 4.8.4 by a stored XSS in the login area. The root cause cited across sources is input handling that allows script execution, with an additional note that session cookies lack the HttpOnly flag, contributing to potential account takeover when an attack...

CODOFORUM Cross-Site Scripting Vulnerability

Codoforum is a free forum package built with PHP and MySQL. A cross-site scripting vulnerability exists in the administration dashboard in Codoforum 4.8.3. The vulnerability can be exploited to conduct a cross-site scripting attack via the Categories in the Manage Users screen...

Codoforum Cross-Site Scripting Vulnerability

Codoforum is a set of PHP and MySQL based forum software. A cross-site scripting vulnerability exists in the user registration page in Codoforum version 4.8.3. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this...

Codoforum 4.8.3 - input_txt Persistent Cross-Site Scripting

Codoforum 4.8.3 - inputtxt Persistent Cross-Site Scripting Exploit Title: Codoforum 4.8.3 - Persistent Cross-Site Scripting Google Dork: intext:"Powered by Codoforum" Date: 2020-01-07 Exploit Author: Vyshnav Vizz Vendor Homepage: https://codoforum.com/index.php Software Link:...

Codoforum 4.8.3 - (input_txt) Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Codoforum 4.8.3 - Persistent Cross-Site Scripting Google Dork: intext:"Powered by Codoforum" Exploit Author: Vyshnav Vizz Vendor Homepage: https://codoforum.com/index.php Software Link: https://codoforum.com/buy Version: Codofor...

Codoforum 4.8.3 - 'input_txt' Persistent Cross-Site Scripting

Exploit Title: Codoforum 4.8.3 - Persistent Cross-Site Scripting Google Dork: intext:"Powered by Codoforum" Date: 2020-01-07 Exploit Author: Vyshnav Vizz Vendor Homepage: https://codoforum.com/index.php Software Link: https://codoforum.com/buy Version: Codoforum 4.8.3 Tested on: Linux CVE : N/A...

Codoforum 4.8.3 Cross Site Scripting

Exploit Title: Codoforum 4.8.3 - Persistent Cross-Site Scripting Google Dork: intext:"Powered by Codoforum" Date: 2020-01-07 Exploit Author: Vyshnav Vizz Vendor Homepage: https://codoforum.com/index.php Software Link: https://codoforum.com/buy Version: Codoforum 4.8.3 Tested on: Linux CVE : N/A...

CVE-2020-5842

Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI. The payload is, for example, executed on the admin/index.php?page=users/manage page...

CVE-2020-5842

Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI. The payload is, for example, executed on the admin/index.php?page=users/manage page...

Design/Logic Flaw

Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI. The payload is, for example, executed on the admin/index.php?page=users/manage page...

CVE-2020-5842

CVE-2020-5842 affects Codoforum up to version 4.8.4 (reported for 4.8.3) with cross-site scripting in the user registration page (username field) and observed payloads executed on admin pages. The issue is a stored XSS vulnerability in Codoforum’s login/registration flow. Connected documents also...

CVE-2020-5842

Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI. The payload is, for example, executed on the admin/index.php?page=users/manage page...

CVE-2020-5843

Codoforum 4.8.3 allows XSS in the admin dashboard via a category to the Manage Users screen...

CVE-2020-5843

Codoforum 4.8.3 allows XSS in the admin dashboard via a category to the Manage Users screen...

Design/Logic Flaw

Codoforum 4.8.3 allows XSS in the admin dashboard via a category to the Manage Users screen...

CVE-2020-5843

Summary: CVE-2020-5843 affects Codoforum 4.8.3 and is a cross-site scripting (XSS) vulnerability. Multiple sources (NVD entry) describe that an XSS can be triggered in the admin dashboard via the Categories on the Manage Users screen. The vulnerability is characterized as an injection/reflective ...

CVE-2020-5843

Codoforum 4.8.3 allows XSS in the admin dashboard via a category to the Manage Users screen...

Codoforum 4.8.3 - Persistent Cross-Site Scripting

Exploit Title: Codoforum 4.8.3 - Persistent Cross-Site Scripting Google Dork: intext:"Powered by Codoforum" Date: 2020-01-03 Exploit Author: Prasanth c41m, Vyshnav Vizz Vendor Homepage: https://codoforum.com/index.php Software Link: https://codoforum.com/buy Version: Codoforum 4.8.3 Tested on:...