9 matches found
EUVD-2017-7148
Malware in sbrugna...
CVE-2017-15725
An XML External Entity Injection vulnerability exists in Dzone AnswerHub...
U.S. Dept Of Defense: Stored XSS at ██████userprofile.aspx
Summary: Stored XSS vulnerability exists at ██████████userprofile.aspx under "say something about yourself...". XSS can be used for a variety of attacks. Impact XSS can be used to steal cookies, password or to run arbitrary code in the victim's browser. Step-by-step Reproduction Instructions 1...
CVE-2017-15725
An XML External Entity Injection vulnerability exists in Dzone AnswerHub...
Xxe
An XML External Entity Injection vulnerability exists in Dzone AnswerHub...
CVE-2017-15725
An XML External Entity Injection vulnerability exists in Dzone AnswerHub...
CVE-2017-15725
CVE-2017-15725: An XML External Entity (XXE) vulnerability in Dzone AnswerHub. NVD metrics show CVSSv2 base 5.0 (Partial confidentiality) and CVSSv3.1 base 7.5 (High) with network attack vector and no user interaction. No exploitation details or fixes are provided in the documents.
CVE-2017-15725: Improper Restriction of XML External Entity Reference
An XML External Entity Injection vulnerability exists in Dzone AnswerHub...
PT-2019-8034
Name of the Vulnerable Software and Affected Versions Dzone AnswerHub affected versions not specified Description An XML External Entity Injection issue exists. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...