156 matches found
Catch Breadcrumb < 1.5.7 - Unauthenticated Reflected XSS
=== DESCRIPTION - REFLECTED XSS ======================================== Catch Breadcrumb 1.5.4 plugin for WordPress allow Reflected XSS via a search query when used with one of the theme from the same author: Alchemist & Alchemist PRO, Izabel & Izabel PRO, Chique & Chique PRO, Clean Enterprise &...
mag-jeunes.com Improper Access Control vulnerability
Security Researcher Nep13371998 Helped patch 562 vulnerabilities Received 4 Coordinated Disclosure badges Received 7 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting mag-jeunes.com website and its users. Following...
search.electronique-mag.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1052494 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CISO MAG Honors KrebsOnSecurity
CISO MAG, a publication dedicated to covering issues near and dear to corporate chief information security officers everywhere, has graciously awarded this author the designation of "Cybersecurity Person of the Year" in its December 2019 issue. KrebsOnSecurity is grateful for the unexpected honor...
OpenEMR SQL Injection Vulnerability (CNVD-2019-37881)
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A SQL injection vulnerability exists in the interfaces/forms/eyemag/js/eyebase.php...
PT-2019-14837
Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.2.1 Description The issue allows a remote attacker to execute arbitrary code in the context of a user's session. This is achieved via the pid parameter in the interface/forms/eye mag/view.php file. Recommendations...
PT-2019-15139
Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.2.1 Description A reflected XSS issue exists in the interface/forms/eye mag/view.php file, specifically affecting the id parameter. Recommendations For versions prior to 5.0.2.1, update to version 5.0.2.1 or later...
OpenEMR Cross-Site Scripting Vulnerability (CNVD-2019-43372)
OpenEMR is a medical practice management software that also supports electronic medical records EMR. A reflected cross-site scripting vulnerability exists in interface/forms/eyemag/view.php in OpenEMR. An attacker can exploit this vulnerability to execute arbitrary code in the context of a user...
OpenEMR Cross-Site Scripting Vulnerability (CNVD-2019-43375)
OpenEMR is a medical practice management software that also supports electronic medical records EMR. A reflected cross-site scripting vulnerability exists in interface/forms/eyemag/view.php in OpenEMR. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via the id...
PT-2019-14661
Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.3 Description The issue allows a user to extract arbitrary data from the database via a non-parameterized INSERT INTO statement. This can be achieved by exploiting the providerID parameter in the interface/forms/e...
Gila CMS Cross-Site Scripting Vulnerability (CNVD-2019-36960)
Gila CMS is an open source content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in gila-blog and gila-mag in Gila CMS 1.11.4 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...
CVE-2019-17535
Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647...
CVE-2019-17535
Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647...
Design/Logic Flaw
Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647...
CVE-2019-17535
Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647...
PT-2019-15193
Name of the Vulnerable Software and Affected Versions Gila CMS versions prior to 1.11.5 Description The issue allows for XSS in blog-list.php, affecting both the gila-blog and gila-mag themes, via the search parameter. Recommendations For versions prior to 1.11.5, update to version 1.11.5 or late...
CVE-2019-17535: Improper Neutralization of Input During Web Page Generation
Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647...
OpenEMR SQL Injection Vulnerability (CNVD-2019-25999)
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A SQL injection vulnerability exists in the interfaces/forms/eyemag/save.php file ...
PT-2019-13736 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 5.0.2 Description: The issue allows SQL Injection in the interface/forms/eye mag/save.php file. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents...
PT-2019-6164
Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.1 Patch 7 Description The issue is related to the lack of validation of XML object sequences in the make task function of OpenEMR, which can be exploited by a remote attacker to conduct SQL injection attacks. The...