EUVD-2018-3060

Malware in sbrugna...

ruibaby Halo Cross-Site Scripting Vulnerability

ruibaby Halo is a Java-based blogging system. A cross-site scripting vulnerability exists in ruibaby Halo version 0.0.2. A remote attacker can inject arbitrary web script or HTML by sending the commentAuthor field to the FrontCommentController.java file...

Cross site scripting

ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...

CVE-2018-11011

ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...

CVE-2018-11011

CVE-2018-11011 affects ruibaby Halo 0.0.2 and is a stored XSS via the commentAuthor field directed at FrontCommentController.java. Affected component: Halo 0.0.2; root cause: improper handling of input in commentAuthor leading to script/HTML execution. Impact (per records): Confidentiality None, ...