EUVD-2018-2494

Malware in sbrugna...

PT-2024-2384 · Phpmyfaq · Phpmyfaq

Name of the Vulnerable Software and Affected Versions: phpMyFAQ versions prior to 3.2.6 Description: The issue is related to the manipulation of the news parameter in a POST request, allowing an attacker to inject malicious JavaScript code. Upon browsing to the compromised news page, the XSS...

Cross site scripting

An issue was discovered in HongCMS 3.0.0. The post news feature has Stored XSS via the content field...

CVE-2018-10422

An issue was discovered in HongCMS 3.0.0. The post news feature has Stored XSS via the content field...

PT-2018-9875

Name of the Vulnerable Software and Affected Versions: HongCMS version 3.0.0 Description: An issue was discovered in the post news feature, which has Stored XSS via the content field. Recommendations: For HongCMS version 3.0.0, update to a newer version that contains a fix for this issue, or as a...

CVE-2018-10422: Improper Neutralization of Input During Web Page Generation

An issue was discovered in HongCMS 3.0.0. The post news feature has Stored XSS via the content field...

CVE-2009-2558

system/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote attackers to post news messages via a direct request...

CVE-2009-2558: Undefined Security Weakness

system/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote attackers to post news messages via a direct request...