17 matches found
EUVD-2020-0583
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2013-7370
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware CVE-2013-7370 Note that Nessus relies on the presence of the package as reported by the...
SUSE CVE-2013-7370
node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...
GHSA-6W62-83G6-RFHJ Node Connect Reflected Cross-Site Scripting in Sencha Labs Connect middleware
node-connect before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370 Overview Connect is a stack of middleware that is executed in order in each request. The "methodOverride" middleware allows the http post to override the meth...
Node Connect Reflected Cross-Site Scripting in Sencha Labs Connect middleware
node-connect before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370 Overview Connect is a stack of middleware that is executed in order in each request. The "methodOverride" middleware allows the http post to override the meth...
UBUNTU-CVE-2013-7371
node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...
CVE-2013-7370
node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...
CVE-2013-7370
node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...
DEBIAN-CVE-2013-7370
node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...
CVE-2013-7370
node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...
Code injection
node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...
UBUNTU-CVE-2013-7370
node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...
CVE-2013-7370
node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...
CVE-2013-7370
node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...
CVE-2013-7370
CVE-2013-7370 concerns node-connect before 2.8.1, which has an XSS vulnerability in the Sencha Labs Connect middleware. Affected component: node-connect (Sencha Connect middleware). Root cause/impact: XSS in the middleware could reflect or inject script via user input; exploitation status is not ...
PT-2019-7013
Name of the Vulnerable Software and Affected Versions node-connect versions prior to 2.8.1 Description The issue arises from the "methodOverride" middleware in Connect, which allows HTTP POST requests to override the method of the request using the method post key or the x-http-method-override...