8 matches found
EUVD-2017-7148
Malware in sbrugna...
CVE-2017-15725
An XML External Entity Injection vulnerability exists in Dzone AnswerHub...
U.S. Dept Of Defense: Stored XSS at ██████userprofile.aspx
Summary: Stored XSS vulnerability exists at ██████████userprofile.aspx under "say something about yourself...". XSS can be used for a variety of attacks. Impact XSS can be used to steal cookies, password or to run arbitrary code in the victim's browser. Step-by-step Reproduction Instructions 1...
CVE-2017-15725
An XML External Entity Injection vulnerability exists in Dzone AnswerHub...
Xxe
An XML External Entity Injection vulnerability exists in Dzone AnswerHub...
CVE-2017-15725
CVE-2017-15725: An XML External Entity (XXE) vulnerability in Dzone AnswerHub. NVD metrics show CVSSv2 base 5.0 (Partial confidentiality) and CVSSv3.1 base 7.5 (High) with network attack vector and no user interaction. No exploitation details or fixes are provided in the documents.
