CVE-2017-9621

Cross-site scripting XSS vulnerability in modules/Base/Lang/Administrator/updatetranslation.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 original or 2 new parameter...

CVE-2017-9621: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in modules/Base/Lang/Administrator/updatetranslation.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 original or 2 new parameter...

PT-2017-19080

Name of the Vulnerable Software and Affected Versions EPESI versions 1.8.2 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the original or new parameter in the update translation.php file. This can be exploited by sending malicious input to the...

CVE-2009-2034

SQL injection vulnerability in writemessage.php in Yogurt 0.3, when registerglobals is enabled, allows remote authenticated users to execute arbitrary SQL commands via the original parameter...