Linux Distros Unpatched Vulnerability : CVE-2018-25047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Smarty before 3.1.47 and 4.x before 4.2.1, libs/plugins/function.mailto.php allows XSS. A web page that uses smartyfunctionmailto, and that could be...

PT-2022-8058 · Smarty +2 · Smarty +2

Name of the Vulnerable Software and Affected Versions: Smarty versions prior to 3.1.47 Smarty versions 4.x prior to 4.2.1 Description: The issue allows cross-site scripting XSS in the libs/plugins/function.mailto.php file. A web page using smarty function mailto and parameterized with GET or POST...

gtalk-inject.txt

Gtalk 1.0.0.105 html injection and Stealing messages Vendor url:http://www.google.com Advisore:http://lostmon.blogspot.com/2008/06/ gtalk-100105-html-injection-and.html Vendor notify:yes exploit available:yes GTalk is a service offered by Google instant messaging. It allows communication via...