PT-2025-26504 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6 Description: The issue allows an authenticated user to delete another user's comments due to improper ownership management. Recommendations: For versions 11.7.0.0 through...

CVE-2022-21683

Wagtail is a Django based content management system focused on flexibility and user experience. When notifications for new replies in comment threads are sent, they are sent to all users who have replied or commented anywhere on the site, rather than only in the relevant threads. This means that ...

CVE-2020-10461

The way comments in article.php vulnerable function in include/functions-article.php are handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored Blind XSS injecting arbitrary web script or HTML in admin/manage-comments.php, via the GET parameter cmt...

WordPress feature-comments plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. feature-comments is a comment management plugin used in it. A cross-site request forgery vulnerability exists in the WordPress...

Qi Bo CMS variable overwrite vulnerability exp-vulnerability warning-the black bar safety net

Vulnerability of specific analysis in the http://security.alibaba.com/blog/blog.htm?spm=0.0.0.0.AooULy&id=1 3, The following published what I wrote of the exploits and exp. Use the following steps: （1）The first visit/member below the“comment management”function, the capture （2）in the http request...

wb news (webmobo) 2.3.3 - Persistent Cross-Site Scripting

wb news webmobo 2.3.3 - Persistent Cross-Site Scripting Title: WB News Webmobo 2.3.3 Stored XSS Vendor: http://www.webmobo.org/ AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory:...