EUVD-2018-3060

Malware in sbrugna...

ruibaby Halo Cross-Site Scripting Vulnerability

ruibaby Halo is a Java-based blogging system. A cross-site scripting vulnerability exists in ruibaby Halo version 0.0.2. A remote attacker can inject arbitrary web script or HTML by sending the commentAuthor field to the FrontCommentController.java file...

CVE-2018-11011

ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...

Cross site scripting

ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...

CVE-2018-11011

CVE-2018-11011 affects ruibaby Halo 0.0.2 and is a stored XSS via the commentAuthor field directed at FrontCommentController.java. Affected component: Halo 0.0.2; root cause: improper handling of input in commentAuthor leading to script/HTML execution. Impact (per records): Confidentiality None, ...