138 matches found
EUVD-2005-0476
Malware in sbrugna...
EUVD-2020-13792
Malware in sbrugna...
EUVD-2006-3256
Malware in sbrugna...
EUVD-2003-1337
Malware in sbrugna...
EUVD-2018-8857
Malware in sbrugna...
EUVD-2006-1137
Malware in sbrugna...
EUVD-2006-3304
Malware in sbrugna...
EUVD-2020-2920
Malware in sbrugna...
EUVD-2021-31733
Malicious code in bioql PyPI...
CVE-2022-4397
A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...
CVE-2022-4397 morontt zend-blog-number-2 Comment Comment.php cross-site request forgery
A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...
GlFusion Cms Access Control Error Vulnerability
glFusion CMS is a content management and publishing system. glFusion CMS v1.7.9 is vulnerable to an access control error, which can be exploited by attackers via /publichtml/comment.php...
CVE-2021-44935
glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /publichtml/comment.php. The attacker can complete the attack remotely without interaction...
Information disclosure
glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /publichtml/comment.php. The attacker can complete the attack remotely without interaction...
CVE-2021-44935
CVE-2021-44935 affects glFusion CMS v1.7.9. The vulnerability is an access control error in /public_html/comment.php that enables an arbitrary user impersonation attack, with remote, no-interaction exploitation reported by the initial sources. The available documents do not provide a remediation ...
CVE-2020-21013
emlog v6.0.0 contains a SQL injection via /admin/comment.php...
CVE-2020-21013
CVE-2020-21013 affects the Emlog CMS (version 6.0.0). The vulnerability is a SQL injection in the admin/comment.php component, arising from improper handling of user-controlled input. Impact is reported as potential exposure of sensitive data (information disclosure) and partial integrity/availab...
Cross site scripting
Reflected XSS in admin/edit-comment.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p...
Cross site scripting
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-comment.php by adding a question mark ? followed by the payload...
CVE-2020-10467
CVE-2020-10467 corresponds to a reflected XSS in Chadha PHPKB Standard Multi-Language 9. The vulnerability arises in admin/edit-comment.php via the GET parameter p, allowing injection of arbitrary script/HTML. Affected software: Chadha PHPKB Standard Multi-Language version 9. Underlying issue: in...