55 matches found
CVE-2023-41609
An open redirect vulnerability in the sanitizeurl parameter of CouchCMS v2.3 allows attackers to redirect a victim user to an arbitrary web site via a crafted URL...
CVE-2023-41609
An open redirect vulnerability in the sanitizeurl parameter of CouchCMS v2.3 allows attackers to redirect a victim user to an arbitrary web site via a crafted URL...
CVE-2023-41609
An open redirect vulnerability in the sanitizeurl parameter of CouchCMS v2.3 allows attackers to redirect a victim user to an arbitrary web site via a crafted URL...
Open redirect
An open redirect vulnerability in the sanitizeurl parameter of CouchCMS v2.3 allows attackers to redirect a victim user to an arbitrary web site via a crafted URL...
CouchCMS Input Validation Error Vulnerability
CouchCMS is an open source content management system CMS for designers. A security vulnerability exists in CouchCMS version v2.3. An attacker exploited the vulnerability to redirect victim users to an arbitrary website via a specially crafted URL...
PT-2023-27996 · Couchcms · Couchcms
Name of the Vulnerable Software and Affected Versions: CouchCMS version 2.3 Description: An open redirect issue exists in the sanitize url parameter, allowing attackers to redirect users to arbitrary websites via crafted URLs. Recommendations: For CouchCMS version 2.3, consider disabling the...
CVE-2023-41609
An open redirect vulnerability in the sanitizeurl parameter of CouchCMS v2.3 allows attackers to redirect a victim user to an arbitrary web site via a crafted URL...
CVE-2023-41609
CVE-2023-41609 affects CouchCMS v2.3, with an open redirect vulnerability in the sanitize_url() parameter. The issue allows an attacker to redirect a victim user to an arbitrary website via a crafted URL. The vulnerability is described across multiple sources as an open redirect in the sanitize_u...
CVE-2023-41609
An open redirect vulnerability in the sanitizeurl parameter of CouchCMS v2.3 allows attackers to redirect a victim user to an arbitrary web site via a crafted URL...
CVE-2023-41609
An open redirect vulnerability in the sanitizeurl parameter of CouchCMS v2.3 allows attackers to redirect a victim user to an arbitrary web site via a crafted URL...
CouchCMS 2.2.1 - Server-Side Request Forgery
Exploit Title: CouchCMS 2.2.1 - SSRF via SVG file upload Date: 2021-01-25 Exploit Author: xxcdd Vendor Homepage: https://github.com/CouchCMS/CouchCMS Software Link: https://github.com/CouchCMS/CouchCMS Version: v2.2.1 Tested on: Windows 7 An issue was discovered in CouchCMS v2.2.1...
CouchCMS 2.2.1 - Persistent Cross-Site Scripting
Exploit Title: CouchCMS 2.2.1 - XSS via SVG file upload Date: 2021-01-25 Exploit Author: xxcdd Vendor Homepage: https://github.com/CouchCMS/CouchCMS Software Link: https://github.com/CouchCMS/CouchCMS Version: v2.2.1 Tested on: Windows 7 An issue was discovered in CouchCMS v2.2.1...
Unspecified Vulnerability in CouchCMS
CouchCMS is an open source content management system CMS for designers. A security vulnerability exists in the includes/mysql2i/mysql2i.func.php and adds/phpmailer/phpmailer.php files in CouchCMS version 2. An attacker can exploit the vulnerability to disclose the full path...
CouchCMS 1.4.5 Cross Site Scripting / Open Redirect
Security Advisory - Curesec Research Team 1. Introduction Affected Product: CouchCMS 1.4.5 Fixed in: 1.4.7 Fixed Version Link: http://www.couchcms.com/products/ Vendor Website: http://www.couchcms.com/ Vulnerability Type: XSS & Open Redirect Remote Exploitable: Yes Reported to vendor: 11/17/2015...
CouchCMS 1.4.5 Code Execution
Security Advisory - Curesec Research Team 1. Introduction Affected Product: CouchCMS 1.4.5 Fixed in: 1.4.7 Fixed Version Link: http://www.couchcms.com/products/ Vendor Website: http://www.couchcms.com/ Vulnerability Type: Code Execution Remote Exploitable: Yes Reported to vendor: 11/17/2015...