EUVD-2018-4943

Malware in sbrugna...

EUVD-2018-8828

Malware in sbrugna...

CVE-2018-17045

An issue was discovered in CMS MaeloStore V.1.5.0. There is a CSRF vulnerability that can change the administrator password via admin/modul/users/aksiusers.php?act=update...

CVE-2018-17045

An issue was discovered in CMS MaeloStore V.1.5.0. There is a CSRF vulnerability that can change the administrator password via admin/modul/users/aksiusers.php?act=update...

Design/Logic Flaw

An issue was discovered in CMS MaeloStore V.1.5.0. There is a CSRF vulnerability that can change the administrator password via admin/modul/users/aksiusers.php?act=update...

CVE-2018-17045

An issue was discovered in CMS MaeloStore V.1.5.0. There is a CSRF vulnerability that can change the administrator password via admin/modul/users/aksiusers.php?act=update...

CVE-2018-17045

CMS MaeloStore V1.5.0 contains a CSRF vulnerability that can change the administrator password via the endpoint admin/modul/users/aksi_users.php?act=update. Affected software: MaeloStore CMS (V1.5.0). Root cause: improper CSRF protections allowing an attacker to trigger a password change. Impact:...

PT-2018-13859

Name of the Vulnerable Software and Affected Versions CMS MaeloStore version 1.5.0 Description A CSRF issue allows changing the administrator password via the "admin/modul/users/aksi users.php?act=update" API endpoint. Recommendations For CMS MaeloStore version 1.5.0, as a temporary workaround,...

CVE-2018-17045: Cross-Site Request Forgery (CSRF)

An issue was discovered in CMS MaeloStore V.1.5.0. There is a CSRF vulnerability that can change the administrator password via admin/modul/users/aksiusers.php?act=update...

CMS MaeloStore Cross-Site Scripting Vulnerability

CMS MaeloStore is a PHP and MySQL based Content Management System CMS for web publishing and product catalogs. A cross-site scripting vulnerability exists in the Telephone field of the admin interface in CMS MaeloStore version 1.5.0. A remote attacker can exploit this vulnerability to inject...

CVE-2018-12992

An issue was discovered CMS MaeloStore V.1.5.0. There is stored XSS in the Telephone field of the admin interface...

CVE-2018-12992

An issue was discovered CMS MaeloStore V.1.5.0. There is stored XSS in the Telephone field of the admin interface...

Cross site scripting

An issue was discovered CMS MaeloStore V.1.5.0. There is stored XSS in the Telephone field of the admin interface...

CVE-2018-12992

CMS MaeloStore V1.5.0 contains a stored cross‑site scripting (XSS) vulnerability in the Telephone field of the admin interface. Multiple connected records (NVD, CNVD/CVELIST/PRION) corroborate an XSS issue in this version, with details stating an attacker can inject script/HTML via the Telephone ...

CVE-2018-12992

An issue was discovered CMS MaeloStore V.1.5.0. There is stored XSS in the Telephone field of the admin interface...

CVE-2018-12992: Improper Neutralization of Input During Web Page Generation

An issue was discovered CMS MaeloStore V.1.5.0. There is stored XSS in the Telephone field of the admin interface...

PT-2018-11521

Name of the Vulnerable Software and Affected Versions CMS MaeloStore version 1.5.0 Description An issue was discovered in the admin interface of CMS MaeloStore, where there is a stored XSS in the Telephone field. Recommendations For CMS MaeloStore version 1.5.0, consider restricting access to the...