CSV Injection

firefly-iii is vulnerable to CSV Injection vulnerability. The vulnerability is due to un-escaped user input in CSV files. This issue can be exploited by an attacker resulting in unauthorized access or manipulation of data when opening the csv file...

Cross-site Scripting (XSS)

jquery-colorbox is vulnerable to cross-site scripting XSS attacks. These attacks are possible when an HTML escaped user input is added to the title attribute of a colorbox. The injected code is executed when the page is rendered. The maintainers say this is expected behavior and will not fix this...

AbanteCart 1.2.7 - Cross-Site Scripting

Exploit Title: AbanteCart 1.2.7 Stored XSS Date: 06-12-2016 Software Link: http://www.abantecart.com/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description By default all user input is escaped using...