9 matches found
VulnCheck KEV: CVE-2021-30134
php-mod/curl a wrapper of the PHP cURL extension before 2.3.2 allows XSS via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php...
Php-mod/curl Library <2.3.2 - Cross-Site Scripting Detection
Php-mod/curl library before 2.3.2 contains a cross-site scripting vulnerability via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php. An attacker can inject arbitrary script, which can allow theft of cookie-based authentication credentials and launch of other...
GHSA-F8P3-Q834-Q9CJ php-mod/curl allows Cross-site Scripting
php-mod/curl a wrapper of the PHP cURL extension before 2.3.2 allows XSS via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php...
CVE-2021-30134
php-mod/curl a wrapper of the PHP cURL extension before 2.3.2 allows XSS via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php...
Design/Logic Flaw
php-mod/curl a wrapper of the PHP cURL extension before 2.3.2 allows XSS via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php...
CVE-2021-30134
The php-mod/curl library (a wrapper of the PHP cURL extension) versions prior to 2.3.2 are vulnerable to Cross-Site Scripting (XSS) . This flaw occurs via the post_file_path_upload.php key parameter and the POST data to post_multidimensional.php. An attacker can inject arbitrary scripts, potentia...
CVE-2021-30134
php-mod/curl a wrapper of the PHP cURL extension before 2.3.2 allows XSS via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php...
CVE-2021-30134: Improper Neutralization of Input During Web Page Generation
php-mod/curl a wrapper of the PHP cURL extension before 2.3.2 allows XSS via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php...
