EUVD-2017-9093

Malware in sbrugna...

EUVD-2017-9092

Malware in sbrugna...

CVE-2017-17949

Cells Blog 3.5 has XSS via the pubreadpost.php fmid parameter...

CVE-2017-17949

Cells Blog 3.5 has XSS via the pubreadpost.php fmid parameter...

Code injection

Cells Blog 3.5 has XSS via the pubreadpost.php fmid parameter...

Sql injection

Cells Blog 3.5 has SQL Injection via the pubreadpost.php ptid parameter...

CVE-2017-17949

Cells Blog 3.5 has XSS via the pubreadpost.php fmid parameter...

CVE-2017-17949

CVE-2017-17949 applies to Cells Blog 3.5. The vulnerability is a Cross-Site Scripting (XSS) flaw exploited via the pub_readpost.php fmid parameter. The connected sources confirm XSS in Cells Blog 3.5 and describe the vulnerability vector, without providing a specific patch/version, workarounds, o...

CVE-2017-17950

CVE-2017-17950 affects Cells Blog 3.5, where the pub_readpost.php ptid parameter enables SQL injection via user-supplied input. The vulnerability’s impact is described in multiple sources (e.g., NVD and CNVD) as allowing unauthorized access to data with partial to high severity. Exploitation deta...