CVE-2018-12110

portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter...

Sql injection

portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter...

CVE-2018-12110

portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter...

CVE-2018-12110

portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter...

CVE-2018-12110: Improper Neutralization of Special Elements used in an SQL Command

portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter...

CVE-2017-5421: Improper Input Validation

A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site is currently loaded. This vulnerability affects Firefox 52 and Thunderbird 52...

PT-2018-11020

Name of the Vulnerable Software and Affected Versions portfolioCMS version 1.0.5 Description The issue is related to SQL Injection, which can be exploited via the preview parameter in the "admin/portfolio.php" endpoint. Recommendations For portfolioCMS version 1.0.5, avoid using the preview...

CVE-2017-5453: Improper Input Validation

A mechanism to inject static HTML into the RSS reader preview page due to a failure to escape characters sent as URL parameters for a feed's "TITLE" element. This vulnerability allows for spoofing but no scripted content can be run. This vulnerability affects Firefox 53...

May 2018 Preview of the Quality Rollups for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows Server 2012 (KB 4098968)

May 2018 Preview of the Quality Rollups for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows Server 2012 KB 4098968 Notice This update is included in the June 2018 Preview of the Quality Rollups for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7 and 4.7.1 for Windows...

May 2018 Preview of the Quality Rollups for .NET Framework 2.0 SP2, 3.0 SP2, 4.5.2, and 4.6 for Windows Server 2008 (KB 4103474)

May 2018 Preview of the Quality Rollups for .NET Framework 2.0 SP2, 3.0 SP2, 4.5.2, and 4.6 for Windows Server 2008 KB 4103474 Notice This update is included in the June 2018 Preview of the Quality Rollups for .NET Framework 2.0, 3.0, 4.5.2 and 4.6 for Windows Server 2008 KB 4291501. Parts of thi...

May 2018 Preview of the Quality Rollups for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows 7 SP1 and Server 2008 R2 SP1 (KB 4103472)

May 2018 Preview of the Quality Rollups for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows 7 SP1 and Server 2008 R2 SP1 KB 4103472 Notice This update is included in the June 2018 Preview of the Quality Rollups for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7 and...

Synology File Station Cross-Site Scripting Vulnerability

Synology File Station is a set of file management tools from Synology. The tool enables users to access files on Synology NAS devices via the Web.Attachment Preview is one of the attachment preview components. A cross-site scripting vulnerability exists in the Attachment Preview component in...

CVE-2018-8923

Cross-site scripting XSS vulnerability in Attachment Preview in Synology File Station before 1.1.4-0122 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...

Cross site scripting

Cross-site scripting XSS vulnerability in Attachment Preview in Synology File Station before 1.1.4-0122 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...

CVE-2018-8923

Cross-site scripting XSS vulnerability in Attachment Preview in Synology File Station before 1.1.4-0122 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...

CVE-2018-8923

Cross-site scripting XSS vulnerability in Attachment Preview in Synology File Station before 1.1.4-0122 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...

CVE-2018-8923

Cross-site scripting XSS vulnerability in Attachment Preview in Synology File Station before 1.1.4-0122 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...

CVE-2018-8923

CVE-2018-8923 describes a Cross-Site Scripting (XSS) vulnerability in the Attachment Preview component of Synology File Station. Affected versions are prior to 1.1.4-0122. The issue allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments, with the impact...

CVE-2018-8923: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Attachment Preview in Synology File Station before 1.1.4-0122 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...

PT-2018-18721

Name of the Vulnerable Software and Affected Versions Synology File Station versions prior to 1.1.4-0122 Description A cross-site scripting XSS issue exists in the Attachment Preview feature of Synology File Station, allowing remote authenticated users to inject arbitrary web script or HTML via...