3654 matches found
CVE-2019-8435
CVE-2019-8435 affects PHPMyWind v5.5, with an XSS vulnerability in admin/default.php exploitable via an HTTP Host header. The connected documents confirm the vulnerability and describe the impact as cross-site scripting, enabling arbitrary script/HTML injection when a crafted Host header is proce...
CVE-2018-16627
panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature...
Design/Logic Flaw
panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature...
CVE-2018-16627
panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature...
CVE-2018-16627
panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature...
CVE-2018-16627
CVE-2018-16627 affects Kirby CMS, specifically the panel/login functionality in version 2.5.12, where a Host header injection is possible through the forget password feature. The connected documents confirm the vulnerability description but do not provide details on affected variants, impact scop...
The vulnerability of the SUSE Linux SMT subscription management software, related to deficiencies in authentication procedures, allows a perpetrator to replace the server.
The vulnerability of the SUSE Linux Subscription Management Tool SMT is related to deficiencies in the authentication process when the HOST header is used. Exploiting this vulnerability could allow a malicious actor to remotely replace the server...
CVE-2018-2504
SAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host header which can result in HTTP Host Header Manipulation or Cross-Site Scripting XSS vulnerability. This is fixed in versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50...
CVE-2018-2504
CVE-2018-2504 affects SAP NetWeaver AS Java Web Container. The issue arises because the HTTP Host header is not validated against a whitelist, enabling potential HTTP Host Header Manipulation and related XSS . Root cause: missing host header whitelisting in the web container. Impact is mitigated ...
Cross site scripting
SAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host header which can result in HTTP Host Header Manipulation or Cross-Site Scripting XSS vulnerability. This is fixed in versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50...
CVE-2018-2504
SAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host header which can result in HTTP Host Header Manipulation or Cross-Site Scripting XSS vulnerability. This is fixed in versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50...
CVE-2018-2504
SAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host header which can result in HTTP Host Header Manipulation or Cross-Site Scripting XSS vulnerability. This is fixed in versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50...
IBM Connections Host Header Injection Vulnerability (CNVD-2018-26902)
IBM Connections is a social software platform developed by IBM that helps organizations invite the right people to collaborate and accelerate innovation generation and results. IBM Connections suffers from a host header injection vulnerability. An attacker could exploit the vulnerability to...
Design/Logic Flaw
IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain. IBM X-Force ID: 152456...
CVE-2018-1896
IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain. IBM X-Force ID: 152456...
CVE-2018-1896
IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain. IBM X-Force ID: 152456...
CVE-2018-1896
IBM Connections versions 5.0, 5.5, and 6.0 are described as vulnerable to a host header injection that could cause navigation to the attacker’s domain. The available connected documents consistently identify this as a host header injection issue but do not provide concrete details on affected com...
CVE-2018-1896
IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain. IBM X-Force ID: 152456...
Buffalo TS5600D1206 Access Control Error Vulnerability
The Buffalo TS5600D1206 is a network storage device from the Buffalo Group of Japan. An access control error vulnerability exists in the nasapi in the Buffalo TS5600D1206 version 3.61-0.10, which can be exploited by an attacker to bypass authentication by sending a modified HTTP Host packet heade...