EUVD-2015-9386

Malware in sbrugna...

Cross site scripting

A reflected Cross-site Scripting XSS vulnerability exists in OcPortal 9.0.20 via the OCFEMOTICONCELL.tpl FIELDNAME field to data/emoticons.php...

PT-2020-7920

Name of the Vulnerable Software and Affected Versions: OcPortal version 9.0.20 Description: A reflected Cross-site Scripting XSS issue exists via the OCF EMOTICON CELL.tpl FIELD NAME field to "data/emoticons.php". This allows for potential malicious script injection. Recommendations: For OcPortal...

CVE-2015-9549: Improper Neutralization of Input During Web Page Generation

A reflected Cross-site Scripting XSS vulnerability exists in OcPortal 9.0.20 via the OCFEMOTICONCELL.tpl FIELDNAME field to data/emoticons.php...

CVE-2007-2859: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in SimpGB 1.46.0 allow remote attackers to execute arbitrary PHP code via a URL in the pathsimpgb parameter to 1 guestbook.php, 2 search.php, 3 mailer.php, 4 avatars.php, 5 ccode.php, 6 comments.php, 7 emoticons.php, 8 gbdownload.php, and possibl...

CVE-2007-0972: Undefined Security Weakness

Unrestricted file upload vulnerability in modules/emoticons.php in Jupiter CMS 1.1.5 allows remote attackers to upload arbitrary files by modifying the HTTP request to send an image content type, and to omit isguest and isuser parameters. NOTE: this issue might be related to CVE-2006-4875...