EUVD-2018-8832

Malware in sbrugna...

CVE-2018-17049

CQU-LANKERS through 2017-11-02 has XSS via the public/api.php callback parameter in an uploadpic action...

CVE-2018-17049

CQU-LANKERS through 2017-11-02 has XSS via the public/api.php callback parameter in an uploadpic action...

Deserialization of untrusted data

CQU-LANKERS through 2017-11-02 has XSS via the public/api.php callback parameter in an uploadpic action...

CVE-2018-17049

CVE-2018-17049 affects CQU-LANKERS up to 2017-11-02. Vulnerability: cross-site scripting (XSS) via the public/api.php callback parameter in the uploadpic action. Root cause: unsanitized callback parameter leading to script injection. Impact: enables injection of client-side scripts (as documented...

CVE-2018-17049

CQU-LANKERS through 2017-11-02 has XSS via the public/api.php callback parameter in an uploadpic action...

CVE-2018-17049: Improper Neutralization of Input During Web Page Generation

CQU-LANKERS through 2017-11-02 has XSS via the public/api.php callback parameter in an uploadpic action...

PT-2018-13861

Name of the Vulnerable Software and Affected Versions CQU-LANKERS through 2017-11-02 Description The issue is related to a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the callback parameter in the "public/api.php" endpoint, specifically in an...