351 matches found
CVE-2018-9235
iScripts SonicBB 1.0 has Reflected Cross-Site Scripting via the query parameter to search.php...
CVE-2018-9235
CVE-2018-9235 affects iScripts SonicBB 1.0. The vulnerability is a Reflected Cross-Site Scripting via the query parameter to search.php, enabling injection of arbitrary script/HTML. Public materials describe a PoC and an exploit for the vulnerable URL (search.php?query=...). The CNVD entry notes ...
CVE-2018-9237
Summary (CVE-2018-9237) : iScripts EasyCreate 3.2.1 contains a stored Cross-Site Scripting (XSS) vulnerability in the Site Description field (and also Site Title per sources). The weakness allows injected HTML/JS to be stored and later executed in the context of the affected application, enabling...
CVE-2018-9236
CVE-2018-9236 is a stored XSS vulnerability in iScripts EasyCreate 3.2.1 affecting the Site title (and Site Description per PoC) fields. Exploitation requires data input stored server-side and later rendered, enabling script execution in victims’ browsers. The CVSS metrics from NVD show a base sc...
CVE-2018-9236
iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site title" field...
CVE-2018-9235
iScripts SonicBB 1.0 has Reflected Cross-Site Scripting via the query parameter to search.php...
CVE-2018-9237
iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site Description" field...
CVE-2018-9236: Improper Neutralization of Input During Web Page Generation
iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site title" field...
CVE-2018-9235: Improper Neutralization of Input During Web Page Generation
iScripts SonicBB 1.0 has Reflected Cross-Site Scripting via the query parameter to search.php...
iScripts EasyCreate Cross-Site Scripting Vulnerability
IScripts EasyCreate is a set of online website builder from Iscripts, Inc. The tool can be used on the server for the client to provide website building services , belong to the fully customizable . A cross-site scripting vulnerability exists in the Site Description field in IScripts EasyCreate...
iScripts EasyCreate cross-site scripting vulnerability (CNVD-2018-08315)
IScripts EasyCreate is a set of online website builder from Iscripts, Inc. The tool can be used on the server for the client to provide website building services , belong to the fully customizable . A cross-site scripting vulnerability exists in the Site title field in IScripts EasyCreate version...
PT-2018-18921
Name of the Vulnerable Software and Affected Versions iScripts EasyCreate version 3.2.1 Description The issue is related to Stored Cross-Site Scripting in the Site title field. Recommendations For iScripts EasyCreate version 3.2.1, update the software to a version that fixes the Stored Cross-Site...
PT-2018-18920
Name of the Vulnerable Software and Affected Versions iScripts SonicBB version 1.0 Description The issue is related to Reflected Cross-Site Scripting. It occurs via the query parameter to the "search.php" endpoint. Recommendations For iScripts SonicBB version 1.0, consider validating and sanitizi...
CVE-2018-9237: Improper Neutralization of Input During Web Page Generation
iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site Description" field...
PT-2018-18922
Name of the Vulnerable Software and Affected Versions iScripts EasyCreate version 3.2.1 Description The issue is related to Stored Cross-Site Scripting in the Site Description field. Recommendations For iScripts EasyCreate version 3.2.1, update the software to a version that fixes the Stored...
iScripts EasyCreate 3.2 - siteid SQL Injection
iScripts EasyCreate 3.2 - siteid SQL Injection Exploit Title: iScripts EasyCreate v3.2 Script - SQL Injection Google Dork: N/A Date: 04.02.2017 Vendor Homepage: http://www.iscripts.com/ Software Buy: http://www.iscripts.com/easycreate/ Demo: http://www.demo.iscripts.com/easycreate/demo// Version:...
iScripts AutoHoster 3.0 - siteid SQL Injection
iScripts AutoHoster 3.0 - siteid SQL Injection Exploit Title: iScripts AutoHoster v3.0 Script - SQL Injection Google Dork: N/A Date: 04.02.2017 Vendor Homepage: http://www.iscripts.com/ Software Buy: http://www.iscripts.com/autohoster/ Demo: http://www.demo.iscripts.com/autohoster/demo/ Version:...
iScripts AutoHoster 3.0 - 'siteid' SQL Injection
Exploit Title: iScripts AutoHoster v3.0 Script - SQL Injection Google Dork: N/A Date: 04.02.2017 Vendor Homepage: http://www.iscripts.com/ Software Buy: http://www.iscripts.com/autohoster/ Demo: http://www.demo.iscripts.com/autohoster/demo/ Version: 3.0 Tested on: Win7 x64, Kali Linux x64 Exploit...
iScripts EasyCreate 3.2 - 'siteid' SQL Injection
Exploit Title: iScripts EasyCreate v3.2 Script - SQL Injection Google Dork: N/A Date: 04.02.2017 Vendor Homepage: http://www.iscripts.com/ Software Buy: http://www.iscripts.com/easycreate/ Demo: http://www.demo.iscripts.com/easycreate/demo// Version: 3.2 Tested on: Win7 x64, Kali Linux x64 Exploi...
iScripts EasyCreate Remote Code Execution Vulnerability
iScripts EasyCreate is an online website builder that can be used on a server to provide website building services to clients and is fully customizable. A remote code execution vulnerability exists in iScripts EasyCreate. The 'userImages' POST parameter of the '/ajaximageupload.php' script fails ...