EUVD-2020-16514

Malware in sbrugna...

Denial Of Service (DoS)

silverstripe/framework is vulnerable to denial of service. The vulnerability exist in xml2array function in Convert.php due to quadratic blowup in Convert::xml2array which allows remote attacker to crash the system via crafted XML document...

Cross site scripting

A reflected XSS vulnerability exists in tohtml/convert.php of Winmail 6.5, which can cause JavaScript code to be executed...

CVE-2020-23774

A reflected XSS vulnerability exists in tohtml/convert.php of Winmail 6.5, which can cause JavaScript code to be executed...

PT-2021-10947

Name of the Vulnerable Software and Affected Versions: Winmail version 6.5 Description: A reflected XSS issue exists in the tohtml/convert.php file, allowing JavaScript code to be executed. Recommendations: For Winmail version 6.5, at the moment, there is no information about a newer version that...

CVE-2020-23774: Improper Neutralization of Input During Web Page Generation

A reflected XSS vulnerability exists in tohtml/convert.php of Winmail 6.5, which can cause JavaScript code to be executed...

stampsnz.com XSS vulnerability

Vulnerable URL: https://stampsnz.com/convert.php?amount=1%22--%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3E1.5 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4868584 VIP website...

PT-2012-3017

Name of the Vulnerable Software and Affected Versions D-Mack Media Currency Converter mod currencyconverter module version 1.0.0 for Joomla! Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the from...

CVE-2012-1018: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in includes/convert.php in D-Mack Media Currency Converter modcurrencyconverter module 1.0.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the from parameter...