EUVD-2017-2445

Malware in sbrugna...

phpSocial Cross-Site Scripting Vulnerability

phpSocial formerly phpDolphin is an open source PHP rapid development framework. A cross-site scripting vulnerability exists in versions of phpSocial prior to 3.0.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2017-10801

phpSocial formerly phpDolphin before 3.0.1 has XSS in the PATHINFO to the search/tag/ URI...

CVE-2017-10801

phpSocial formerly phpDolphin before 3.0.1 has XSS in the PATHINFO to the search/tag/ URI...

Code injection

phpSocial formerly phpDolphin before 3.0.1 has XSS in the PATHINFO to the search/tag/ URI...

CVE-2017-10801

CVE-2017-10801 affects phpSocial (formerly phpDolphin) prior to 3.0.1. The vulnerability is a Cross-Site Scripting flaw in PATH_INFO for the search/tag/ endpoints, caused by improper handling of PATH_INFO input. Public sources describe that an attacker can inject arbitrary web script or HTML via ...

CVE-2017-10801

phpSocial formerly phpDolphin before 3.0.1 has XSS in the PATHINFO to the search/tag/ URI...

CVE-2017-10801: Improper Neutralization of Input During Web Page Generation

phpSocial formerly phpDolphin before 3.0.1 has XSS in the PATHINFO to the search/tag/ URI...

PT-2017-11513

Name of the Vulnerable Software and Affected Versions phpSocial formerly phpDolphin versions prior to 3.0.1 Description The issue concerns an XSS in the PATH INFO to the 'search/tag/' URI. Recommendations For versions prior to 3.0.1, update to version 3.0.1 or later to resolve the issue...

PhpSocial 2.0.0304_20222226 - Cross-Site Request Forgery

Exploit for php platform in category web applications Security Advisory - Curesec Research Team 1. Introduction Affected Product: PhpSocial v2.0.030420222226 Fixed in: not fixed Fixed Version Link: n/a Vendor Webite: http://phpsocial.net Vulnerability Type: CSRF Remote Exploitable: Yes Reported t...

PhpSocial 2.0.0304_20222226 Cross Site Request Forgery

Security Advisory - Curesec Research Team 1. Introduction Affected Product: PhpSocial v2.0.030420222226 Fixed in: not fixed Fixed Version Link: n/a Vendor Webite: http://phpsocial.net Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 11/21/2015 Disclosed to public: 12/21/2015...

PhpSocial 2.0.0304_20222226 Cross Site Scripting / Open Redirect

Security Advisory - Curesec Research Team 1. Introduction Affected Product: PhpSocial v2.0.030420222226 Fixed in: not fixed Fixed Version Link: n/a Vendor Webite: http://phpsocial.net Vulnerability Type: XSS / Open Redirect Remote Exploitable: Yes Reported to vendor: 11/21/2015 Disclosed to publi...

PhpSocial 2.0.0304_20222226 - Cross-Site Request Forgery

PhpSocial 2.0.030420222226 - Cross-Site Request Forgery Security Advisory - Curesec Research Team 1. Introduction Affected Product: PhpSocial v2.0.030420222226 Fixed in: not fixed Fixed Version Link: n/a Vendor Webite: http://phpsocial.net Vulnerability Type: CSRF Remote Exploitable: Yes Reported...

PhpSocial 2.0.0304_20222226 - Cross-Site Request Forgery

Security Advisory - Curesec Research Team 1. Introduction Affected Product: PhpSocial v2.0.030420222226 Fixed in: not fixed Fixed Version Link: n/a Vendor Webite: http://phpsocial.net Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 11/21/2015 Disclosed to public: 12/21/2015...