Design/Logic Flaw

VertrigoServ 2.17 allows XSS via the /inc/extensions.php ext parameter...

PT-2019-19271

Name of the Vulnerable Software and Affected Versions VertrigoServ version 2.17 Description The issue allows for XSS via the "/inc/extensions.php" API endpoint, specifically through the ext parameter. Recommendations For VertrigoServ version 2.17, consider restricting access to the...

VertrigoServ 2.17 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications alert1 3. Solution: The product is discontinued. Update last version -- 0day.today 2019-03-09...

VertrigoServ 2.17 Cross Site Scripting

alert1 3. Solution: The product is discontinued. Update last version --...

PT-2014-6071

Name of the Vulnerable Software and Affected Versions Lunar CMS versions prior to 3.3-3 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of administrators for specific requests. This...

CVE-2012-5102: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in inc/extensions.php in VertrigoServ 2.25 allows remote attackers to inject arbitrary web script or HTML via the ext parameter...

PT-2012-5771

Name of the Vulnerable Software and Affected Versions VertrigoServ version 2.25 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the ext parameter in the inc/extensions.php file. Recommendations For VertrigoServ...

VertrigoServ 2.25 - extensions.php Script Cross-Site Scripting

VertrigoServ 2.25 - extensions.php Script Cross-Site Scripting source: https://www.securityfocus.com/bid/51293/info VertrigoServ is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary...