107 matches found
CVE-2018-6518
Composr CMS 10.0.13 is affected by a Cross‑Site Scripting (XSS) vulnerability. The issue is triggered via the site_name parameter in a request to /adminzone/index.php with page=admin-setupwizard&type=step3, indicating inadequate input sanitization in that path. Publicly available connected docume...
PT-2018-17606
Name of the Vulnerable Software and Affected Versions Composr CMS version 10.0.13 Description The issue concerns a security problem where an attacker can inject malicious code. This is achieved by manipulating the site name parameter in a specific request to the '/adminzone/index.php' API endpoin...
CVE-2018-6518: Improper Neutralization of Input During Web Page Generation
Composr CMS 10.0.13 has XSS via the sitename parameter in a page=admin-setupwizard&type=step3 request to /adminzone/index.php...
Composr CMS v10.0.0 XSS Vulnerability
Composr CMS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:composr:cms";...
Composr CMS 10.0.0 Cross Site Scripting
Document Title: =============== Composr CMS v10.0.0 - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2066 Release Date: ============= 2017-06-08 Vulnerability Laboratory ID VL-ID: ====================================...
Composr CMS v10.0.0 - Cross Site Scripting Vulnerability
Document Title: =============== Composr CMS v10.0.0 - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2066 Release Date: ============= 2017-06-08 Vulnerability Laboratory ID VL-ID: ====================================...
Composr CMS v10.0.0 - Cross Site Scripting Vulnerability
Document Title: =============== Composr CMS v10.0.0 - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2066 Release Date: ============= 2017-06-07 Vulnerability Laboratory ID VL-ID: ====================================...