CVE-2018-15533

A reflected cross-site scripting vulnerability exists in Geutebrueck reporter 16 before 7.8.974.20 by appending a query string to /modifychannel/exec or /images/.png on TCP port 12005...

PT-2018-13069

Name of the Vulnerable Software and Affected Versions Geutebrueck re porter versions prior to 7.8.974.20 Description A reflected cross-site scripting issue exists by appending a query string to "API Endpoints" such as /modifychannel/exec or /images/.png on TCP port 12005. Recommendations For...

CVE-2018-15533: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting vulnerability exists in Geutebrueck reporter 16 before 7.8.974.20 by appending a query string to /modifychannel/exec or /images/.png on TCP port 12005...

PT-2018-18253

Name of the Vulnerable Software and Affected Versions: Western Bridge Cobub Razor version 0.7.2 Description: An issue was discovered where authentication is not required for the "/index.php?/manage/channel/modifychannel" API endpoint. This allows for stored XSS to be triggered during a later...

CVE-2018-7746: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/manage/channel/modifychannel. For example, with a crafted channel name, stored XSS is triggered during a later /index.php?/manage/channel request by an admin...