CVE-2017-9674

In SimpleCE 2.3.0, an authenticated XSS vulnerability was found on index.php/content/text/1?returnurl=XSS exploitable as a regular or admin user...

CVE-2017-9674

CVE-2017-9674 affects SimpleCE 2.3.0. An authenticated cross-site scripting (XSS) vulnerability exists on the endpoint index.php/content/text/1?return_url=[XSS], exploitable by a regular user or an admin user. The issue is described consistently across multiple sources in the connected documents,...

CVE-2017-9674

In SimpleCE 2.3.0, an authenticated XSS vulnerability was found on index.php/content/text/1?returnurl=XSS exploitable as a regular or admin user...

PT-2017-19108

Name of the Vulnerable Software and Affected Versions SimpleCE version 2.3.0 Description A CSRF issue can be exploited to add an administrator account or change its settings, including the password, by accessing specific API endpoints such as "index.php/user/new" or "index.php/user/1"...

CVE-2017-9674: Improper Neutralization of Input During Web Page Generation

In SimpleCE 2.3.0, an authenticated XSS vulnerability was found on index.php/content/text/1?returnurl=XSS exploitable as a regular or admin user...

CVE-2017-9673: Cross-Site Request Forgery (CSRF)

In SimpleCE 2.3.0, a CSRF vulnerability can be exploited to add an administrator account via the index.php/user/new URI or change its settings via the index.php/user/1 URI, including its password...

PT-2017-19109

Name of the Vulnerable Software and Affected Versions SimpleCE version 2.3.0 Description An authenticated XSS issue was discovered, allowing exploitation as a regular or admin user. The issue is exploitable through the "index.php/content/text/1?return url=XSS" endpoint, where the return url...

millerbrook.co.uk XSS vulnerability

Vulnerable URL: http://www.millerbrook.co.uk/index.php?contentID="...

Zenbership CMS 1.0.8 SQL Injection

Document Title: =============== Zenbership 1.0.8 CMS - Multiple SQL Injection Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2073 Release Date: ============= 2017-06-09 Vulnerability Laboratory ID VL-ID:...

Zenbership 1.0.8 CMS - Multiple SQL Injection Vulnerabilities

Document Title: =============== Zenbership 1.0.8 CMS - Multiple SQL Injection Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2073 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9759 CVE-ID: ======= CVE-2017-9759 Release Date:...

CVE-2017-9435

Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...

Sql injection

Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...

CVE-2017-9435

Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...

CVE-2017-9435

Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...

CVE-2017-9435

Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...

PT-2017-18918

Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM versions prior to 5.0.3 Description The issue concerns a SQL injection. It affects the user/index.php file, specifically the search supervisor and search statut parameters. Recommendations For versions prior to 5.0.3, update t...

CVE-2017-9444: Cross-Site Request Forgery (CSRF)

BigTree CMS through 4.2.18 has CSRF related to the core\admin\modules\users\profile\update.php script modify user information, the index.php/admin/developer/packages/delete/ URI remove packages, the index.php/admin/developer/upgrade/ignore/?versions= URI, and the...

CVE-2017-9435: Improper Neutralization of Special Elements used in an SQL Command

Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...

PT-2017-18926

Name of the Vulnerable Software and Affected Versions BigTree CMS versions prior to 4.2.19 Description The issue is related to CSRF, allowing modification of user information, removal of packages, ignoring versions, and setting FTP directories. Specifically, it affects the...

fischkopf.de XSS vulnerability

Vulnerable URL: https://www.fischkopf.de/index.php?page=fischkopfwerdenstep1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 106555 VIP website status:| No Check fischkopf.de SSL...