EUVD-2017-9091

Malware in sbrugna...

CVE-2017-17948

Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request...

Cells Blog Cross-Site Scripting Vulnerability

Cells Blog is a free but powerful mini blogging system. A cross-site scripting vulnerability exists in Cells Blog 3.5. An attacker can exploit this vulnerability by using the jfdname parameter in the act=showpic request to conduct a cross-site scripting attack...

CVE-2017-17948

Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request...

Cross site request forgery (csrf)

Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request...

CVE-2017-17948

Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request...

CVE-2017-17948

Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request...

CVE-2017-17948

Cells Blog 3.5 is affected by a Cross‑Site Scripting (XSS) vulnerability that can be triggered via the jfdname parameter in an act=showpic request. Multiple sources (NVD/NVD mirror, CNVD, Red Hat advisory, CNVD) corroborate the issue, describing XSS in Cells Blog 3.5 and the jfdname parameter pat...

CVE-2017-17948: Improper Neutralization of Input During Web Page Generation

Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request...

PT-2017-15119

Name of the Vulnerable Software and Affected Versions Cells Blog version 3.5 Description The issue allows for XSS via the jfdname parameter in an "act=showpic" request. Recommendations For version 3.5, avoid using the jfdname parameter in the "act=showpic" request until the issue is resolved...