53 matches found
CVE-2015-2983: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in admin.php in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free and earlier allows remote attackers to hijack the authentication of arbitrary users...
CVE-2015-2982: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in jquery.lightbox-0.5.min.js in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified input to admin.php...
JVN#78240242: Photo Gallery CMS for PC, smartphone and feature phone (Free) vulnerable to cross-site request forgery
Photo Gallery CMS for PC, smartphone and feature phone Free provided by PHP Kobo contains a cross-site request forgery CWE-352 vulnerability in admin.php. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Update the Software Replace admin.ph...
CVE-2014-3894
Cross-site scripting XSS vulnerability in PHP Kobo Multifunctional MailForm Free 2014/1/28 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header...
Cross site scripting
Cross-site scripting XSS vulnerability in PHP Kobo Multifunctional MailForm Free 2014/1/28 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header...
CVE-2014-3894
Cross-site scripting XSS vulnerability in PHP Kobo Multifunctional MailForm Free 2014/1/28 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header...
CVE-2014-3894
CVE-2014-3894 is a documented cross-site scripting (XSS) vulnerability in PHP Kobo’s Multifunctional MailForm Free (≤2014/1/28). The issue stems from how HTTP Referer headers are processed, allowing remote attackers to inject arbitrary scripts/HTML. Affected product: Multifunctional MailForm Free...
PT-2014-5583
Name of the Vulnerable Software and Affected Versions Kobo Multifunctional MailForm Free versions 2014/1/28 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header. This can lead to the execution of malicio...
CVE-2014-3894: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in PHP Kobo Multifunctional MailForm Free 2014/1/28 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header...
Fedora Core 11 FEDORA-2009-8789 (kobo)
The remote host is missing an update to kobo announced via advisory FEDORA-2009-8789. OpenVAS Vulnerability Test $Id: fcore20098789.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8789 kobo Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
Fedora Core 11 FEDORA-2009-8789 (kobo)
The remote host is missing an update to kobo announced via advisory FEDORA-2009-8789. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Fedora 11 : kobo-0.1.2-1.fc11 (2009-8789)
The remote Fedora host is missing a security update involving kobo. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
