EUVD-2018-8290

Malware in sbrugna...

EUVD-2018-4872

Malware in sbrugna...

CraftedWeb Cross-Site Scripting Vulnerability (CNVD-2018-18899)

CraftedWeb is a CMS Content Management System for game servers. A cross-site scripting vulnerability exists in CraftedWeb versions 2013-09-24 and earlier, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of the 'p' parameter...

CVE-2018-16450

CraftedWeb through 2013-09-24 has reflected XSS via the p parameter...

CVE-2018-16450

CraftedWeb through 2013-09-24 has reflected XSS via the p parameter...

Cross site scripting

CraftedWeb through 2013-09-24 has reflected XSS via the p parameter...

CVE-2018-16450

CraftedWeb through 2013-09-24 has reflected XSS via the p parameter...

CVE-2018-16450

CVE-2018-16450 concerns CraftedWeb, a CMS for game servers, with a reflected XSS vulnerability in the p parameter affecting versions up to 2013-09-24. The issue is caused by improper input handling that allows injected scripts/HTML to be returned in responses. Public details consistently describe...

CraftedWeb Cross-Site Scripting Vulnerability

CraftedWeb is a CMS Content Management System for game servers. A cross-site scripting vulnerability exists in the aaspincludes/pages/notice.php file in versions of CraftedWeb prior to 2013-09-24. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the 'e'...

Design/Logic Flaw

In CraftedWeb through 2013-09-24, aaspincludes/pages/notice.php allows XSS via the e parameter...

CVE-2018-12919

In CraftedWeb through 2013-09-24, aaspincludes/pages/notice.php allows XSS via the e parameter...

CVE-2018-12919

In CraftedWeb through 2013-09-24, aaspincludes/pages/notice.php allows XSS via the e parameter...

CVE-2018-12919

In CraftedWeb through 2013-09-24, aaspincludes/pages/notice.php allows XSS via the e parameter...

CVE-2018-12919

CraftedWeb up to 2013-09-24 is affected by CVE-2018-12919. A cross-site scripting flaw exists in aasp_includes/pages/notice.php that can be triggered through the e parameter, enabling injected script/HTML. CNVD/CVE records confirm the XSS vector (via e) and reference updated CVSS scores (NVD: CVS...