EUVD-2017-15452

Malware in sbrugna...

HashOver Cross-Site Scripting Vulnerability

HashOver is a free and open source PHP-based commenting system. A cross-site scripting vulnerability exists in HashOver version 2.0, which stems from the program's failure to adequately filter user data submitted to the 'hashover/scripts/widget-output.php' URL. A remote attacker could exploit thi...

CVE-2017-6395

An issue was discovered in HashOver 2.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the 'hashover/scripts/widget-output.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...

CVE-2017-6395

An issue was discovered in HashOver 2.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the 'hashover/scripts/widget-output.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...

Design/Logic Flaw

An issue was discovered in HashOver 2.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the 'hashover/scripts/widget-output.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...

CVE-2017-6395

An issue was discovered in HashOver 2.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the 'hashover/scripts/widget-output.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...

CVE-2017-6395

CVE-2017-6395 affects HashOver 2.0. The issue stems from insufficient filtration of user-supplied data passed to the hashover/scripts/widget-output.php URL, enabling an attacker to execute arbitrary HTML and script in the context of the vulnerable website via a cross-site scripting vulnerability....