25 matches found
EUVD-2018-16863
Malware in sbrugna...
EUVD-2018-8891
Malware in sbrugna...
CVE-2018-5077
Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter...
CVE-2020-23371: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in static/admin/js/kindeditor/plugins/multiimage/images/swfupload.swf in noneCms v1.3.0 allows remote attackers to inject arbitrary web script or HTML via the movieName parameter...
PT-2021-10892
Name of the Vulnerable Software and Affected Versions noneCms version 1.3.0 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the movieName parameter in the...
NoneCms: Cross-site scripting vulnerabilities
NoneCms is a simple and compact open-source content management system that can be used to quickly build corporate sites, personal blogs, and support mobile. NoneCms 1.3.0 version of static/admin/js/kindeditor/plugins/multiimage/images/swfupload.swf cross-site scripting vulnerability. The...
CVE-2018-17113
App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter, a related issue to CVE-2018-9173...
CVE-2018-17113: Improper Neutralization of Input During Web Page Generation
App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter, a related issue to CVE-2018-9173...
PT-2018-13904
Name of the Vulnerable Software and Affected Versions EasyCMS version 1.5 Description The issue is related to an XSS vulnerability in the uploadify.swf file, specifically through the uploadifyID or movieName parameter. Recommendations For EasyCMS version 1.5, consider restricting access to the...
CVE-2018-9173
Cross-site scripting XSS vulnerability in admin/template/js/uploadify/uploadify.swf in GetSimple CMS 3.3.13 allows remote attackers to inject arbitrary web script or HTML, as demonstrated by the movieName parameter...
CVE-2018-9173
Cross-site scripting XSS vulnerability in admin/template/js/uploadify/uploadify.swf in GetSimple CMS 3.3.13 allows remote attackers to inject arbitrary web script or HTML, as demonstrated by the movieName parameter...
CVE-2018-9173
Cross-site scripting XSS vulnerability in admin/template/js/uploadify/uploadify.swf in GetSimple CMS 3.3.13 allows remote attackers to inject arbitrary web script or HTML, as demonstrated by the movieName parameter...
CVE-2018-9173
Cross-site scripting XSS vulnerability in admin/template/js/uploadify/uploadify.swf in GetSimple CMS 3.3.13 allows remote attackers to inject arbitrary web script or HTML, as demonstrated by the movieName parameter...
CVE-2018-9173: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin/template/js/uploadify/uploadify.swf in GetSimple CMS 3.3.13 allows remote attackers to inject arbitrary web script or HTML, as demonstrated by the movieName parameter...
PT-2018-18904
Name of the Vulnerable Software and Affected Versions GetSimple CMS version 3.3.13 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This is demonstrated by the movieName parameter. Recommendations For GetSimple CMS version 3.3.13, update...
Online Ticket Booking Cross-Site Scripting Vulnerability (CNVD-2018-01216)
Advanced Real Estate Script is a ready-made real estate website script.Online Ticket Booking is one of the online booking systems. A cross-site scripting vulnerability exists in Online Ticket Booking in Advanced Real Estate Script. The vulnerability can be exploited to conduct cross-site scriptin...
Design/Logic Flaw
Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter...
CVE-2018-5077
Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter...