EUVD-2006-3191

Malware in sbrugna...

EUVD-2005-1957

Malware in sbrugna...

EUVD-2008-0410

Malware in sbrugna...

CVE-2023-38911

A Cross-Site Scripting XSS vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields...

CVE-2023-38911

A Cross-Site Scripting XSS vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields...

Cross site scripting

A Cross-Site Scripting XSS vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields...

CSZ CMS 跨站脚本漏洞

CSZ CMS is an open source PHP-based content management system CMS. A security vulnerability exists in CSZ CMS version 1.3.0, which stems from a vulnerability that allows an attacker to execute arbitrary code via the Gallery parameter in the YouTube URL field using a carefully crafted payload...

CVE-2023-38911

A Cross-Site Scripting XSS vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields...

PT-2023-36386 · Undefined · Undefined

🚨 CVE-2023-38911 A Cross-Site Scripting XSS vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields. 🎖@cveNotify...

PT-2023-26682

Name of the Vulnerable Software and Affected Versions CSZ CMS version 1.3.0 Description A Cross-Site Scripting XSS issue allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields. Recommendations For CSZ CMS version 1.3.0, consider disabli...

PT-2023-16678

Name of the Vulnerable Software and Affected Versions: CSZ CMS version 1.3.0 Description: A Cross-Site Scripting XSS issue allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields. Recommendations: For CSZ CMS version 1.3.0, avoid using t...

CVE-2023-38911: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields...

PT-2022-25998 · WordPress · Contest Gallery Pro +1

Name of the Vulnerable Software and Affected Versions: Contest Gallery WordPress plugin versions prior to 19.1.5.1 Contest Gallery Pro WordPress plugin versions prior to 19.1.5.1 Description: The issue allows malicious users with at least author privilege to leak sensitive information from the...

CVE-2017-17869

The mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter...

PT-2009-6570 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions 1.4.10 and earlier Description: The issue allows remote authenticated users to determine the existence of files via directory traversal sequences in the avatar and possibly the gallery parameters when changing the user avatar fr...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Simple PHP Scripts gallery 0.1, 0.3, and 0.4 allows remote attackers to inject arbitrary web script or HTML via the gallery parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-4803: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Simple PHP Scripts gallery 0.1, 0.3, and 0.4 allows remote attackers to inject arbitrary web script or HTML via the gallery parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-2449: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Isaac McGowan phpInstantGallery 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 gallery parameter to a index.php and b image.php, and the 2 imgnum parameter to image.php. NOTE: the provenance of this information is...

CVE-2008-0400

Cross-site scripting XSS vulnerability in header.tpl.php in the modern template for Singapore 0.10.1 allows remote attackers to inject arbitrary web script or HTML via the gallery parameter to default.php...

CVE-2008-0400: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in header.tpl.php in the modern template for Singapore 0.10.1 allows remote attackers to inject arbitrary web script or HTML via the gallery parameter to default.php...