CVE-2016-9891

Cross-site scripting XSS vulnerability in admin/media.php and admin/mediaitem.php in Dotclear before 2.11 allows remote authenticated users to inject arbitrary web script or HTML via the upfiletitle or mediatitle parameter aka the media title...

CVE-2016-9891

Cross-site scripting XSS vulnerability in admin/media.php and admin/mediaitem.php in Dotclear before 2.11 allows remote authenticated users to inject arbitrary web script or HTML via the upfiletitle or mediatitle parameter aka the media title...

UBUNTU-CVE-2016-9891

Cross-site scripting XSS vulnerability in admin/media.php and admin/mediaitem.php in Dotclear before 2.11 allows remote authenticated users to inject arbitrary web script or HTML via the upfiletitle or mediatitle parameter aka the media title...

CVE-2016-9891

Dotclear before version 2.11 contains a cross-site scripting (XSS) vulnerability in admin/media.php and admin/media_item.php that allows remote authenticated users to inject arbitrary web script or HTML via the upfiletitle or media_title parameters. Impact is described as XSS with typical user in...

CVE-2016-9891

Cross-site scripting XSS vulnerability in admin/media.php and admin/mediaitem.php in Dotclear before 2.11 allows remote authenticated users to inject arbitrary web script or HTML via the upfiletitle or mediatitle parameter aka the media title...

CVE-2016-6523

Multiple cross-site scripting XSS vulnerabilities in the media manager in Dotclear before 2.10 allow remote attackers to inject arbitrary web script or HTML via the 1 q or 2 linktype parameter to admin/media.php...

CVE-2016-6523

Multiple cross-site scripting XSS vulnerabilities in the media manager in Dotclear before 2.10 allow remote attackers to inject arbitrary web script or HTML via the 1 q or 2 linktype parameter to admin/media.php...

CVE-2016-6523

Multiple cross-site scripting XSS vulnerabilities in the media manager in Dotclear before 2.10 allow remote attackers to inject arbitrary web script or HTML via the 1 q or 2 linktype parameter to admin/media.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the media manager in Dotclear before 2.10 allow remote attackers to inject arbitrary web script or HTML via the 1 q or 2 linktype parameter to admin/media.php...

CVE-2016-6523

CVE-2016-6523 describes multiple cross-site scripting (XSS) vulnerabilities in the Dotclear media manager prior to version 2.10. The issue allows remote attackers to inject arbitrary web script or HTML by supplying crafted values to the parameters (1) q or (2) link_type in admin/media.php. The NV...

CVE-2016-6523

Multiple cross-site scripting XSS vulnerabilities in the media manager in Dotclear before 2.10 allow remote attackers to inject arbitrary web script or HTML via the 1 q or 2 linktype parameter to admin/media.php...

Arbitrary File Upload Vulnerability in Dotclear

Dotclear is an open source free web publishing software, created by Olivier Meunier in 2002. Dotclear suffers from an arbitrary file upload vulnerability. Due to the administrator theme management page blogtheme.php, inc/core/class.dc.modules.php there is a theme legitimacy checking problem,...

Dotclear Unrestricted File Upload Vulnerability

Dotclear is a software developer Olivier Meunier developed a free PHP and MySQL-based blog Blog publishing software. An unrestricted file upload vulnerability exists in the Blog appearance in the 'Install or upgrade manually' module of Dotclear 2.10.4 and earlier versions. A remote attacker can...

CVE-2016-9268

Unrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually" module in Dotclear through 2.10.4 allows remote authenticated super-administrators to execute arbitrary code by uploading a theme file with an zip extension, and then accessing it via unspecified...

Unrestricted file upload

Unrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually" module in Dotclear through 2.10.4 allows remote authenticated super-administrators to execute arbitrary code by uploading a theme file with an zip extension, and then accessing it via unspecified...

CVE-2016-9268

Unrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually" module in Dotclear through 2.10.4 allows remote authenticated super-administrators to execute arbitrary code by uploading a theme file with an zip extension, and then accessing it via unspecified...

CVE-2016-9268

Dotclear vulnerability CVE-2016-9268: Unrestricted file upload in the Blog appearance (Install or upgrade manually) affects Dotclear up to version 2.10.4. A remote attacker with authenticated super-administrator rights can upload a theme file with a .zip extension and then access it via unspecifi...

CVE-2016-9268

Unrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually" module in Dotclear through 2.10.4 allows remote authenticated super-administrators to execute arbitrary code by uploading a theme file with an zip extension, and then accessing it via unspecified...

Dotclear Password Reset Address Forgery Vulnerability

Dotclear is an open source free web publishing software. Dotclear suffers from a password reset address forgery vulnerability that can be exploited by an attacker to forge the hostname of a password reset address...

Dotclear Unlimited File Upload Vulnerability

Dotclear is an open source free web publishing software is an open source free web publishing software. An unrestricted file upload vulnerability exists in Dotclear, which can be exploited by an attacker to execute arbitrary PHP code by uploading a zip file...