12 matches found
EUVD-2022-5727
Malicious code in bioql PyPI...
CVE-2020-14146
KumbiaPHP through 1.1.1, in Development mode, allows XSS via the public/pages/kumbia PATHINFO...
GHSA-X6GQ-VR59-4Q5Q KumbiaPHP Cross-site Scripting
KumbiaPHP through 1.1.1, in Development mode, allows XSS via the public/pages/kumbia/PATHINFO...
KumbiaPHP Cross-site Scripting
KumbiaPHP through 1.1.1, in Development mode, allows XSS via the public/pages/kumbia/PATHINFO...
KumbiaPHP Cross-Site Scripting Vulnerability
KumbiaPHP is a lightweight, BSD-licensed PHP framework. A cross-site scripting vulnerability exists in KumbiaPHP 1.1.1 and earlier versions in development mode. An attacker can exploit this vulnerability via public/pages/kumbia PATHINFO to conduct cross-site scripting attacks...
CVE-2020-14146
KumbiaPHP through 1.1.1, in Development mode, allows XSS via the public/pages/kumbia PATHINFO...
CVE-2020-14146
KumbiaPHP through 1.1.1, in Development mode, allows XSS via the public/pages/kumbia PATHINFO...
Design/Logic Flaw
KumbiaPHP through 1.1.1, in Development mode, allows XSS via the public/pages/kumbia PATHINFO...
CVE-2020-14146
KumbiaPHP through 1.1.1, in Development mode, allows XSS via the public/pages/kumbia PATHINFO...
CVE-2020-14146
CVE-2020-14146 affects KumbiaPHP (1.1.1 and earlier) in Development mode, enabling Cross‑Site Scripting via public/pages/kumbia PATH_INFO. The root cause is improper handling of PATH_INFO that allows injection/execution of arbitrary JavaScript in a victim’s browser. Several sources (NVD entry, Re...
PT-2020-13892
Name of the Vulnerable Software and Affected Versions KumbiaPHP versions 1.1.1 and earlier Description The issue allows for XSS via the "public/pages/kumbia" PATH INFO, specifically when KumbiaPHP is in Development mode. Recommendations For versions 1.1.1 and earlier, consider disabling Developme...
