4 matches found
PT-2018-14991
Name of the Vulnerable Software and Affected Versions JTBCPHP version 3.0.1.7 Description The issue concerns a CSRF vulnerability that can be exploited via the "console/xml/manage.php?type=action&action=edit" URI. It is demonstrated by an XSS payload in the content parameter. Recommendations For...
PT-2018-14992
Name of the Vulnerable Software and Affected Versions JTBCPHP version 3.0.1.7 Description The issue is related to a cross-site scripting XSS problem. It occurs via the "console/xml/manage.php" API endpoint, specifically when the type parameter is set to "action" and the action parameter is set to...
CVE-2018-19546: Improper Neutralization of Input During Web Page Generation
JTBCPHP 3.0.1.7 has CSRF via the console/xml/manage.php?type=action&action=edit URI, as demonstrated by an XSS payload in the content parameter...