182 matches found
Mblog is vulnerable to XSS
Mblog is an open source Java blog system , support for multiple users , support for switching themes . Mblog has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...
Mblog Cross-Site Scripting Vulnerability (CNVD-2021-26164)
Mblog is an open source Java blog system , support for multi-user , support for switching themes. Mblog 3.5 cross-site scripting vulnerability , an attacker can /settings/profile of the signature field to exploit the vulnerability to inject arbitrary Web script or HTML...
Mblog Cross-Site Scripting Vulnerability (CNVD-2021-26162)
Mblog is an open source Java blog system , support for multi-user , support for switching themes. Mblog 3.5 has a cross-site scripting vulnerability that can be exploited to inject arbitrary Web script or HTML via the nickname field in /settings/profile...
Mblog Cross-Site Scripting Vulnerability (CNVD-2021-26163)
Mblog is an open source Java blog system , support for multi-user , support for switching themes. Mblog 3.5 has a cross-site scripting vulnerability , the vulnerability stems from post editing via the post content field . An attacker can use this vulnerability to inject arbitrary Web script or HT...
Mblog Cross-Site Scripting Vulnerability (CNVD-2021-26119)
Mblog is an open source Java blog system , support for multi-user , support for switching themes. Mblog 3.5.0 suffers from a cross-site scripting vulnerability. Attackers can use the /post/editing post header field to inject arbitrary Web script or HTML...
CVE-2020-19619
Cross Site Scripting XSS vulnerability in mblog 3.5 via the signature field to /settings/profile...
CVE-2020-19618
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...
CVE-2020-19619
Cross Site Scripting XSS vulnerability in mblog 3.5 via the signature field to /settings/profile...
CVE-2020-19618
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...
Cross site scripting
Cross Site Scripting XSS vulnerability in mblog 3.5 via the signature field to /settings/profile...
Cross site scripting
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...
CVE-2020-19616
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post header field to /post/editing...
CVE-2020-19617
Cross Site Scripting XSS vulnerability in mblog 3.5 via the nickname field to /settings/profile...
CVE-2020-19617
Cross Site Scripting XSS vulnerability in mblog 3.5 via the nickname field to /settings/profile...
CVE-2020-19616
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post header field to /post/editing...
Cross site scripting
Cross Site Scripting XSS vulnerability in mblog 3.5 via the nickname field to /settings/profile...
Cross site scripting
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post header field to /post/editing...
CVE-2020-19619
CVE-2020-19619 is a Cross‑Site Scripting (XSS) vulnerability affecting mblog 3.5, exploitable via the signature field on the /settings/profile page. The vulnerability is described across multiple sources as allowing injection of arbitrary web scripts/HTML through that field, with the issue locate...
