73 matches found
langhsu mblog 跨站脚本漏洞
Mblog is an open source Java blog system , support for multi-user , support for switching themes. Mblog 3.5.0 suffers from a cross-site scripting vulnerability. Attackers can use the /post/editing post header field to inject arbitrary Web script or HTML...
CVE-2020-19616: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post header field to /post/editing...
CVE-2020-19618: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...
PT-2021-10374
Name of the Vulnerable Software and Affected Versions: mblog version 3.5 Description: A Cross Site Scripting XSS issue exists, allowing exploitation via the post header field to the "/post/editing" API endpoint. Recommendations: For mblog version 3.5, update the software to a version that include...
CVE-2017-1000463
Leafpub version 1.2.0-beta6 is vulnerable to stored cross-site scripting vulnerability, within the edit blog post page, which can result in disruption of service and execution of javascript code...
wordpress: multiple issues
CVE-2015-2213: SQL injection in comments ID. - CVE-2015-5730: Timing attack in widgets. - CVE-2015-5731: Denial of service by locking a post from being edited. - CVE-2015-5732, CVE-2015-5733 CVE-2015-5734: XSS...
PT-2010-5588
Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.4.12 Description The issue allows remote authenticated users to bypass intended restrictions on the number of img MyCodes by editing a post after it has been created. Recommendations For versions prior to 1.4.12, updat...
CVE-2010-4624: Undefined Security Weakness
MyBB aka MyBulletinBoard before 1.4.12 allows remote authenticated users to bypass intended restrictions on the number of img MyCodes by editing a post after it has been created...
Duhok Forum 1.0 Cross Site Scripting
======================================================================================== | Title : Duhok Forum 1.0 script Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com | Dork : åÐÇ ÇáãæÞÚ íÓÊÎÏã ÈÑäÇãÌ duhokFrm 1.0 | Tested on:...
Information disclosure
The XML-RPC implementation xmlrpc.php in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors...
CVE-2008-0664
The XML-RPC implementation xmlrpc.php in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors...
