63 matches found
CVE-2018-12588
Cross-site scripting XSS vulnerability in templates/frontend/pages/searchResults.tpl in Public Knowledge Project PKP Open Monograph Press OMP v1.2.0 through 3.1.1-2 before 3.1.1-3 allows remote attackers to inject arbitrary web script or HTML via the catalog.noTitlesSearch parameter aka the Searc...
CVE-2018-12588
Cross-site scripting XSS vulnerability in templates/frontend/pages/searchResults.tpl in Public Knowledge Project PKP Open Monograph Press OMP v1.2.0 through 3.1.1-2 before 3.1.1-3 allows remote attackers to inject arbitrary web script or HTML via the catalog.noTitlesSearch parameter aka the Searc...
CVE-2018-12588: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in templates/frontend/pages/searchResults.tpl in Public Knowledge Project PKP Open Monograph Press OMP v1.2.0 through 3.1.1-2 before 3.1.1-3 allows remote attackers to inject arbitrary web script or HTML via the catalog.noTitlesSearch parameter aka the Searc...
Public Knowledge Project Open Journal System Cross-Site Scripting Vulnerability
Public Knowledge Project PKP Open Journal System OJS is a journal management and publishing system. A cross-site scripting vulnerability exists in PKP OJS version 3.X prior to 3.1.1-2, which stems from the program failing to escape the '$authors' parameter. A remote attacker can use the '$authors...
CVE-2018-12229
Cross-site scripting XSS vulnerability in Public Knowledge Project PKP Open Journal System OJS 3.0.0 to 3.1.1-1 allows remote attackers to inject arbitrary web script or HTML via the templates/frontend/pages/search.tpl parameter aka the By Author field...
CVE-2018-12229
Cross-site scripting XSS vulnerability in Public Knowledge Project PKP Open Journal System OJS 3.0.0 to 3.1.1-1 allows remote attackers to inject arbitrary web script or HTML via the templates/frontend/pages/search.tpl parameter aka the By Author field...
CVE-2018-12229
The CVE-2018-12229 issue affects PKP Open Journal System (OJS) versions 3.0.0 through 3.1.1-1. The root cause is a cross-site scripting flaw in the templates/frontend/pages/search.tpl, specifically via the By Author field, allowing remote attackers to inject arbitrary web script or HTML. Some sou...
CVE-2018-12229
Cross-site scripting XSS vulnerability in Public Knowledge Project PKP Open Journal System OJS 3.0.0 to 3.1.1-1 allows remote attackers to inject arbitrary web script or HTML via the templates/frontend/pages/search.tpl parameter aka the By Author field...
CVE-2018-12229: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Public Knowledge Project PKP Open Journal System OJS 3.0.0 to 3.1.1-1 allows remote attackers to inject arbitrary web script or HTML via the templates/frontend/pages/search.tpl parameter aka the By Author field...
CVE-2011-5195
Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference Systems 2.3.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload a PHP file...
CVE-2011-5196
Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Systems 2.3.6 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files...
CVE-2011-5196
Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Systems 2.3.6 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files...
CVE-2011-5197
Public Knowledge Project Open Harvester Systems (PKP OHS) versions 2.3.1 and earlier are affected by a CSRF vulnerability in index/manager/fileUpload that allows remote attackers to hijack administrator authentication when uploading PHP files. The description specifies the affected component and ...
CVE-2011-5195
CVE-2011-5195 describes a CSRF vulnerability in the Open Conference Systems (Public Knowledge Project) component at index/manager/fileUpload. The flaw lets remote attackers hijack administrator sessions for requests that upload a PHP file, affecting versions 2.3.4 and earlier. The underlying issu...
CVE-2011-5195: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference Systems 2.3.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload a PHP file...
PT-2012-2172
Name of the Vulnerable Software and Affected Versions Public Knowledge Project Open Conference Systems versions 2.3.4 and earlier Description A cross-site request forgery CSRF issue exists in the index/manager/fileUpload endpoint, allowing remote attackers to hijack the authentication of...
CVE-2011-5197: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Harvester Systems 2.3.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files...
CVE-2011-5196: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Systems 2.3.6 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files...
PT-2012-2174
Name of the Vulnerable Software and Affected Versions Public Knowledge Project Open Harvester Systems versions 2.3.1 and earlier Description A cross-site request forgery CSRF issue exists in the index/manager/fileUpload endpoint, allowing remote attackers to hijack the authentication of...
Multiple vulnerabilities in Open Journal Systems (OJS)
Advisory ID: HTB23079 Product: Open Journal Systems OJS Vendor: Public Knowledge Project Vulnerable Versions: 2.3.6 and probably prior Tested Version: 2.3.6 Vendor Notification: 29 February 2012 Vendor Patch: 16 March 2012 Public Disclosure: 21 March 2012 Vulnerability Type: Arbitrary File...