CVE-2018-15129: Improper Neutralization of Input During Web Page Generation

ThinkSAAS through 2018-07-25 has XSS via the index.php?app=article&ac=comment&ts=do content parameter...

Cross site request forgery (csrf)

An issue was discovered in WeaselCMS v0.3.5. CSRF can update the website settings such as the theme, title, and description via index.php...

CVE-2018-14958

An issue was discovered in WeaselCMS v0.3.5. CSRF can update the website settings such as the theme, title, and description via index.php...

Cross site request forgery (csrf)

An issue was discovered in WeaselCMS v0.3.5. CSRF can create new pages via an index.php?b=pages&a=new URI...

CVE-2018-14958

An issue was discovered in WeaselCMS v0.3.5. CSRF can update the website settings such as the theme, title, and description via index.php...

CVE-2018-14959

An issue was discovered in WeaselCMS v0.3.5. CSRF can create new pages via an index.php?b=pages&a=new URI...

CVE-2018-14958: Cross-Site Request Forgery (CSRF)

An issue was discovered in WeaselCMS v0.3.5. CSRF can update the website settings such as the theme, title, and description via index.php...

PT-2018-12834

Name of the Vulnerable Software and Affected Versions WeaselCMS version 0.3.5 Description An issue allows CSRF to update website settings, including theme, title, and description, via the "index.php" endpoint. Recommendations For WeaselCMS version 0.3.5, update to a newer version that contains a...

CVE-2018-14959: Cross-Site Request Forgery (CSRF)

An issue was discovered in WeaselCMS v0.3.5. CSRF can create new pages via an index.php?b=pages&a=new URI...

PT-2018-12835

Name of the Vulnerable Software and Affected Versions WeaselCMS version 0.3.5 Description An issue was discovered that allows CSRF to create new pages via an "index.php?b=pages&a=new" URI. Recommendations For WeaselCMS version 0.3.5, consider implementing proper CSRF protection mechanisms to...

Design/Logic Flaw

An issue was discovered in Rincewind 0.1. A reinstall vulnerability exists because the parameter p of index.php and another file named commonPages.php allows an attacker to reinstall the product, with all data reset...

Cross site scripting

An issue was discovered in Rincewind 0.1. There is a cross-site scripting XSS vulnerability involving a p=account request to index.php and another file named commonPages.php...

CVE-2018-14873

An issue was discovered in Rincewind 0.1. There is a cross-site scripting XSS vulnerability involving a p=account request to index.php and another file named commonPages.php...

CVE-2018-14872: Improper Input Validation

An issue was discovered in Rincewind 0.1. A reinstall vulnerability exists because the parameter p of index.php and another file named commonPages.php allows an attacker to reinstall the product, with all data reset...

CVE-2018-14873: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Rincewind 0.1. There is a cross-site scripting XSS vulnerability involving a p=account request to index.php and another file named commonPages.php...

CVE-2018-14873

CVE-2018-14873 affects the Rincewind 0.1 CMS. The issue is a cross-site scripting (XSS) vulnerability triggered by a p=account request to index.php and to commonPages.php. The connected documents do not provide exploitation details, impact metrics beyond generic XSS, or any remediation/patch info...

PT-2018-12773

Name of the Vulnerable Software and Affected Versions Rincewind version 0.1 Description A cross-site scripting XSS issue was found, involving a request to "index.php" and "commonPages.php". This issue can be exploited through a 'p=account' request. Recommendations For Rincewind version 0.1,...

PT-2018-12772

Name of the Vulnerable Software and Affected Versions Rincewind version 0.1 Description A reinstall issue exists due to the parameter p in index.php and commonPages.php, allowing an attacker to reinstall the product and reset all data. Recommendations For Rincewind version 0.1, avoid using the...

CVE-2018-14873

An issue was discovered in Rincewind 0.1. There is a cross-site scripting XSS vulnerability involving a p=account request to index.php and another file named commonPages.php...

CVE-2018-14872

An issue was discovered in Rincewind 0.1. A reinstall vulnerability exists because the parameter p of index.php and another file named commonPages.php allows an attacker to reinstall the product, with all data reset...