EUVD-2014-4258

Malware in sbrugna...

CVE-2014-4331 OctavoCMS reflected XSS vulnerability

This proprietary content management software is vulnerable to reflected XSS on the file admin/viewer.php, src parameter. Current release on their demo site is vulnerable, same as other few sites I could find. PoC:...

OctavoCMS <= 3.1.1 XSS Vulnerability - Active Check

OctavoCMS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-4331

Cross-site scripting XSS vulnerability in admin/viewer.php in OctavoCMS allows remote attackers to inject arbitrary web script or HTML via the src parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/viewer.php in OctavoCMS allows remote attackers to inject arbitrary web script or HTML via the src parameter...

CVE-2014-4331

CVE-2014-4331 is an XSS vulnerability affecting OctavoCMS up to version 3.1.1, exploitable through the src parameter in admin/viewer.php. The issue is reflected XSS; PoC demonstrates script injection on vulnerable demos. OpenVAS metadata indicates a WillNotFix remediation, and several vulnerabili...

CVE-2014-4331

Cross-site scripting XSS vulnerability in admin/viewer.php in OctavoCMS allows remote attackers to inject arbitrary web script or HTML via the src parameter...

OctavoCMS Admin Panel Cross Site Scripting

Title : OctavoCMS Admin Panel Cross Site Scripting Vendor : http://octavocms.com/ Date : 2014.07.10 ================================ Proof of concept : First You should Login As Admin ... 1 : http://TARGET/admin/media/add.php?action="alert/XSS/ 2 :...

OctavoCMS Cross Site Scripting

This proprietary content management software is vulnerable to reflected XSS on the file admin/viewer.php, src parameter. Current release on their demo site is vulnerable, same as other few sites I could find. PoC:...