CVE-2018-16627

panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature...

CVE-2018-16627

CVE-2018-16627 affects Kirby CMS, specifically the panel/login functionality in version 2.5.12, where a Host header injection is possible through the forget password feature. The connected documents confirm the vulnerability description but do not provide details on affected variants, impact scop...

PT-2018-13653

Name of the Vulnerable Software and Affected Versions Kirby version 2.5.12 Description The issue concerns a Host header injection via the "forget password" feature in the panel/login of Kirby. Recommendations For version 2.5.12, consider disabling the "forget password" feature as a temporary...

The vulnerability of the SUSE Linux SMT subscription management software, related to deficiencies in authentication procedures, allows a perpetrator to replace the server.

The vulnerability of the SUSE Linux Subscription Management Tool SMT is related to deficiencies in the authentication process when the HOST header is used. Exploiting this vulnerability could allow a malicious actor to remotely replace the server...

CVE-2018-16627: Improper Neutralization of Special Elements in Output Used by a Downstream Component

panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature...

CVE-2018-2504

SAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host header which can result in HTTP Host Header Manipulation or Cross-Site Scripting XSS vulnerability. This is fixed in versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50...

CVE-2018-2504

CVE-2018-2504 affects SAP NetWeaver AS Java Web Container. The issue arises because the HTTP Host header is not validated against a whitelist, enabling potential HTTP Host Header Manipulation and related XSS . Root cause: missing host header whitelisting in the web container. Impact is mitigated ...

CVE-2018-2504

SAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host header which can result in HTTP Host Header Manipulation or Cross-Site Scripting XSS vulnerability. This is fixed in versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50...

Cross site scripting

SAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host header which can result in HTTP Host Header Manipulation or Cross-Site Scripting XSS vulnerability. This is fixed in versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50...

CVE-2018-2504

SAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host header which can result in HTTP Host Header Manipulation or Cross-Site Scripting XSS vulnerability. This is fixed in versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50...

CVE-2018-2504: Improper Neutralization of Input During Web Page Generation

SAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host header which can result in HTTP Host Header Manipulation or Cross-Site Scripting XSS vulnerability. This is fixed in versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50...

PT-2018-3538

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS Java Web Container service versions prior to 7.10 SAP NetWeaver AS Java Web Container service versions prior to 7.11 SAP NetWeaver AS Java Web Container service versions prior to 7.20 SAP NetWeaver AS Java Web Container servi...

IBM Connections Host Header Injection Vulnerability (CNVD-2018-26902)

IBM Connections is a social software platform developed by IBM that helps organizations invite the right people to collaborate and accelerate innovation generation and results. IBM Connections suffers from a host header injection vulnerability. An attacker could exploit the vulnerability to...

Design/Logic Flaw

IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain. IBM X-Force ID: 152456...

CVE-2018-1896

IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain. IBM X-Force ID: 152456...

CVE-2018-1896

IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain. IBM X-Force ID: 152456...

CVE-2018-1896

IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain. IBM X-Force ID: 152456...

CVE-2018-1896

IBM Connections versions 5.0, 5.5, and 6.0 are described as vulnerable to a host header injection that could cause navigation to the attacker’s domain. The available connected documents consistently identify this as a host header injection issue but do not provide concrete details on affected com...

CVE-2018-1896: Improper Neutralization of Special Elements in Output Used by a Downstream Component

IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain. IBM X-Force ID: 152456...

PT-2018-14744

Name of the Vulnerable Software and Affected Versions IBM Connections versions 5.0 through 6.0 Description The issue allows for a possible host header injection attack, which could cause navigation to the attacker's domain. Recommendations For IBM Connections versions 5.0 through 6.0, at the...