296 matches found
CVE-2013-7380
The Etherpad Lite epimageconvert Plugin has a Remote Command Injection Vulnerability...
Command injection
The Etherpad Lite epimageconvert Plugin has a Remote Command Injection Vulnerability...
UBUNTU-CVE-2013-7380
The Etherpad Lite epimageconvert Plugin has a Remote Command Injection Vulnerability Authentication is not required for remote exploitation...
CVE-2013-7380
The Etherpad Lite epimageconvert Plugin has a Remote Command Injection Vulnerability Authentication is not required for remote exploitation...
CVE-2013-7380
The Etherpad Lite epimageconvert Plugin has a Remote Command Injection Vulnerability...
CVE-2013-7380
The Etherpad Lite ep_imageconvert Plugin for Etherpad Lite is affected by a Remote Command Injection vulnerability. Affected: ep_imageconvert
CVE-2013-7380: Improper Neutralization of Special Elements in Output Used by a Downstream Component
The Etherpad Lite epimageconvert Plugin has a Remote Command Injection Vulnerability...
PT-2020-7578
Name of the Vulnerable Software and Affected Versions Etherpad Lite ep imageconvert Plugin affected versions not specified Description The issue concerns a Remote Command Injection vulnerability in the Etherpad Lite ep imageconvert Plugin. Recommendations At the moment, there is no information...
Etherpad-Lite Cross-Site Scripting Vulnerability
Etherpad-Lite is a Web-based open source document editor from the Etherpad Foundation. A cross-site scripting vulnerability exists in the templates/pad.html page in Etherpad-Lite version 1.7.5, which stems from a lack of proper validation of client-side data in the WEB application and can be...
CVE-2019-18209
templates/pad.html in Etherpad-Lite 1.7.5 has XSS when the browser does not encode the path of the URL, as demonstrated by Internet Explorer...
CVE-2019-18209
templates/pad.html in Etherpad-Lite 1.7.5 has XSS when the browser does not encode the path of the URL, as demonstrated by Internet Explorer...
Default credentials
templates/pad.html in Etherpad-Lite 1.7.5 has XSS when the browser does not encode the path of the URL, as demonstrated by Internet Explorer...
CVE-2019-18209
templates/pad.html in Etherpad-Lite 1.7.5 has XSS when the browser does not encode the path of the URL, as demonstrated by Internet Explorer...
CVE-2019-18209
templates/pad.html in Etherpad-Lite 1.7.5 has XSS when the browser does not encode the path of the URL, as demonstrated by Internet Explorer...
CVE-2019-18209
CVE-2019-18209 affects Etherpad-Lite 1.7.5, with XSS in templates/pad.html when the browser does not encode the URL path (demonstrated in Internet Explorer). The root cause is lack of proper validation/encoding of client-side data in that page. Public disclosures in multiple feeds confirm the iss...
PT-2019-15277
Name of the Vulnerable Software and Affected Versions Etherpad-Lite version 1.7.5 Description The issue arises in the templates/pad.html file of Etherpad-Lite when the browser does not properly encode the path of the URL, leading to a cross-site scripting XSS vulnerability. This has been...
CVE-2019-18209: Improper Neutralization of Input During Web Page Generation
templates/pad.html in Etherpad-Lite 1.7.5 has XSS when the browser does not encode the path of the URL, as demonstrated by Internet Explorer...
Etherpad Lite Access Control Bypass Vulnerability
Etherpad Lite is the Etherpad Foundation's suite of open source rich text online collaboration software. A security vulnerability exists in the webaccess.js file in Etherpad Lite versions prior to 1.6.4. A remote attacker can exploit this vulnerability by sending a specially crafted request to...