EUVD-2017-2445

Malware in sbrugna...

phpSocial Cross-Site Scripting Vulnerability

phpSocial formerly phpDolphin is an open source PHP rapid development framework. A cross-site scripting vulnerability exists in versions of phpSocial prior to 3.0.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2017-10801

phpSocial formerly phpDolphin before 3.0.1 has XSS in the PATHINFO to the search/tag/ URI...

Code injection

phpSocial formerly phpDolphin before 3.0.1 has XSS in the PATHINFO to the search/tag/ URI...

CVE-2017-10801

phpSocial formerly phpDolphin before 3.0.1 has XSS in the PATHINFO to the search/tag/ URI...

CVE-2017-10801

CVE-2017-10801 affects phpSocial (formerly phpDolphin) prior to 3.0.1. The vulnerability is a Cross-Site Scripting flaw in PATH_INFO for the search/tag/ endpoints, caused by improper handling of PATH_INFO input. Public sources describe that an attacker can inject arbitrary web script or HTML via ...

CVE-2017-10801

phpSocial formerly phpDolphin before 3.0.1 has XSS in the PATHINFO to the search/tag/ URI...

PhpSocial 2.0.0304_20222226 - Cross-Site Request Forgery

Security Advisory - Curesec Research Team 1. Introduction Affected Product: PhpSocial v2.0.030420222226 Fixed in: not fixed Fixed Version Link: n/a Vendor Webite: http://phpsocial.net Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 11/21/2015 Disclosed to public: 12/21/2015...

PhpSocial 2.0.0304_20222226 Cross Site Scripting / Open Redirect

Security Advisory - Curesec Research Team 1. Introduction Affected Product: PhpSocial v2.0.030420222226 Fixed in: not fixed Fixed Version Link: n/a Vendor Webite: http://phpsocial.net Vulnerability Type: XSS / Open Redirect Remote Exploitable: Yes Reported to vendor: 11/21/2015 Disclosed to publi...

PhpSocial 2.0.0304_20222226 - Cross-Site Request Forgery

PhpSocial 2.0.030420222226 - Cross-Site Request Forgery Security Advisory - Curesec Research Team 1. Introduction Affected Product: PhpSocial v2.0.030420222226 Fixed in: not fixed Fixed Version Link: n/a Vendor Webite: http://phpsocial.net Vulnerability Type: CSRF Remote Exploitable: Yes Reported...

PhpSocial 2.0.0304_20222226 - Cross-Site Request Forgery

Exploit for php platform in category web applications Security Advisory - Curesec Research Team 1. Introduction Affected Product: PhpSocial v2.0.030420222226 Fixed in: not fixed Fixed Version Link: n/a Vendor Webite: http://phpsocial.net Vulnerability Type: CSRF Remote Exploitable: Yes Reported t...

PhpSocial 2.0.0304_20222226 Cross Site Request Forgery

Security Advisory - Curesec Research Team 1. Introduction Affected Product: PhpSocial v2.0.030420222226 Fixed in: not fixed Fixed Version Link: n/a Vendor Webite: http://phpsocial.net Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 11/21/2015 Disclosed to public: 12/21/2015...