Cross site scripting

iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site title" field...

CVE-2018-9235

CVE-2018-9235 affects iScripts SonicBB 1.0. The vulnerability is a Reflected Cross-Site Scripting via the query parameter to search.php, enabling injection of arbitrary script/HTML. Public materials describe a PoC and an exploit for the vulnerable URL (search.php?query=...). The CNVD entry notes ...

CVE-2018-9237

Summary (CVE-2018-9237) : iScripts EasyCreate 3.2.1 contains a stored Cross-Site Scripting (XSS) vulnerability in the Site Description field (and also Site Title per sources). The weakness allows injected HTML/JS to be stored and later executed in the context of the affected application, enabling...

CVE-2018-9236

CVE-2018-9236 is a stored XSS vulnerability in iScripts EasyCreate 3.2.1 affecting the Site title (and Site Description per PoC) fields. Exploitation requires data input stored server-side and later rendered, enabling script execution in victims’ browsers. The CVSS metrics from NVD show a base sc...

CVE-2018-9236

iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site title" field...

CVE-2018-9235

iScripts SonicBB 1.0 has Reflected Cross-Site Scripting via the query parameter to search.php...

CVE-2018-9237

iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site Description" field...

CVE-2018-9235: Improper Neutralization of Input During Web Page Generation

iScripts SonicBB 1.0 has Reflected Cross-Site Scripting via the query parameter to search.php...

iScripts EasyCreate Cross-Site Scripting Vulnerability

IScripts EasyCreate is a set of online website builder from Iscripts, Inc. The tool can be used on the server for the client to provide website building services , belong to the fully customizable . A cross-site scripting vulnerability exists in the Site Description field in IScripts EasyCreate...

iScripts EasyCreate cross-site scripting vulnerability (CNVD-2018-08315)

IScripts EasyCreate is a set of online website builder from Iscripts, Inc. The tool can be used on the server for the client to provide website building services , belong to the fully customizable . A cross-site scripting vulnerability exists in the Site title field in IScripts EasyCreate version...

PT-2018-18921

Name of the Vulnerable Software and Affected Versions iScripts EasyCreate version 3.2.1 Description The issue is related to Stored Cross-Site Scripting in the Site title field. Recommendations For iScripts EasyCreate version 3.2.1, update the software to a version that fixes the Stored Cross-Site...

PT-2018-18920

Name of the Vulnerable Software and Affected Versions iScripts SonicBB version 1.0 Description The issue is related to Reflected Cross-Site Scripting. It occurs via the query parameter to the "search.php" endpoint. Recommendations For iScripts SonicBB version 1.0, consider validating and sanitizi...

CVE-2018-9237: Improper Neutralization of Input During Web Page Generation

iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site Description" field...

PT-2018-18922

Name of the Vulnerable Software and Affected Versions iScripts EasyCreate version 3.2.1 Description The issue is related to Stored Cross-Site Scripting in the Site Description field. Recommendations For iScripts EasyCreate version 3.2.1, update the software to a version that fixes the Stored...

CVE-2018-9236: Improper Neutralization of Input During Web Page Generation

iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site title" field...

iScripts EasyCreate 3.2 - siteid SQL Injection

iScripts EasyCreate 3.2 - siteid SQL Injection Exploit Title: iScripts EasyCreate v3.2 Script - SQL Injection Google Dork: N/A Date: 04.02.2017 Vendor Homepage: http://www.iscripts.com/ Software Buy: http://www.iscripts.com/easycreate/ Demo: http://www.demo.iscripts.com/easycreate/demo// Version:...

iScripts EasyCreate 3.2 - 'siteid' SQL Injection

Exploit Title: iScripts EasyCreate v3.2 Script - SQL Injection Google Dork: N/A Date: 04.02.2017 Vendor Homepage: http://www.iscripts.com/ Software Buy: http://www.iscripts.com/easycreate/ Demo: http://www.demo.iscripts.com/easycreate/demo// Version: 3.2 Tested on: Win7 x64, Kali Linux x64 Exploi...

iScripts AutoHoster 3.0 - 'siteid' SQL Injection

Exploit Title: iScripts AutoHoster v3.0 Script - SQL Injection Google Dork: N/A Date: 04.02.2017 Vendor Homepage: http://www.iscripts.com/ Software Buy: http://www.iscripts.com/autohoster/ Demo: http://www.demo.iscripts.com/autohoster/demo/ Version: 3.0 Tested on: Win7 x64, Kali Linux x64 Exploit...

iScripts AutoHoster 3.0 - siteid SQL Injection

iScripts AutoHoster 3.0 - siteid SQL Injection Exploit Title: iScripts AutoHoster v3.0 Script - SQL Injection Google Dork: N/A Date: 04.02.2017 Vendor Homepage: http://www.iscripts.com/ Software Buy: http://www.iscripts.com/autohoster/ Demo: http://www.demo.iscripts.com/autohoster/demo/ Version:...

iScripts EasyCreate Remote Code Execution Vulnerability

iScripts EasyCreate is an online website builder that can be used on a server to provide website building services to clients and is fully customizable. A remote code execution vulnerability exists in iScripts EasyCreate. The 'userImages' POST parameter of the '/ajaximageupload.php' script fails ...