23 matches found
CVE-2023-40656
A reflected XSS vulnerability was discovered in the Quickform component for Joomla...
EUVD-2022-4333
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2018-1999022
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PEAR HTMLQuickForm version 3.2.14 contains an eval injection CWE-95 vulnerability in HTMLQuickForm's getSubmitValue method, HTMLQuickForm's validate method,...
CVE-2023-40656
A reflected XSS vulnerability was discovered in the Quickform component for Joomla...
CVE-2023-40656
A reflected XSS vulnerability was discovered in the Quickform component for Joomla...
Cross site scripting
A reflected XSS vulnerability was discovered in the Quickform component for Joomla...
CVE-2023-40656
CVE-2023-40656 is a reflected XSS vulnerability in Joomla’s Quickform component. Across sources, the issue is described as a reflected XSS in Quickform, affecting Joomla extensions (notably plasma-web.ru listing) for versions 1.0.0–3.3.01. The CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A...
CVE-2023-40656 Extension - plasma-web.ru - Reflected XSS in Quickform component for Joomla 1.0.0-3.3.01
A reflected XSS vulnerability was discovered in the Quickform component for Joomla...
CVE-2023-40656: Improper Neutralization of Input During Web Page Generation
A reflected XSS vulnerability was discovered in the Quickform component for Joomla...
PT-2023-27578
Name of the Vulnerable Software and Affected Versions Joomla Quickform component affected versions not specified Description A reflected XSS issue was discovered in the Quickform component for Joomla. This issue allows for the execution of malicious scripts on the client-side, potentially leading...
Joomla Security Breach
Joomla is an open source, cross-platform content management system CMS developed by the Open Source Matters team using PHP and MySQL. A security vulnerability exists in Joomla, which originates from a reflected cross-site scripting vulnerability in the Quickform component...
quickform, , Other
Developer states exploit is "hack yourself" scenario...
MGASA-2019-0049 Updated php-pear-HTML_QuickForm package fixes security vulnerability
A vulnerability in the HTMLQuickForm package has been found which potentially allows remote code execution...
FreeBSD : moodle -- multiple vulnerabilities (074cb225-bb2d-11e8-90e1-fcaa147e860e)
moodle reports : Moodle XML import of ddwtos could lead to intentional remote code execution QuickForm library remote code vulnerability upstream Boost theme - blog search GET parameter insufficiently filtered C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
moodle -- multiple vulnerabilities
moodle reports: Moodle XML import of ddwtos could lead to intentional remote code execution QuickForm library remote code vulnerability upstream Boost theme - blog search GET parameter insufficiently filtered...
UBUNTU-CVE-2018-1999022
PEAR HTMLQuickForm version 3.2.14 contains an eval injection CWE-95 vulnerability in HTMLQuickForm's getSubmitValue method, HTMLQuickForm's validate method, HTMLQuickFormhierselect's setOptions method, HTMLQuickFormelement's findValue method, HTMLQuickFormelement's prepareValue method. that can...
DEBIAN-CVE-2018-1999022
PEAR HTMLQuickForm version 3.2.14 contains an eval injection CWE-95 vulnerability in HTMLQuickForm's getSubmitValue method, HTMLQuickForm's validate method, HTMLQuickFormhierselect's setOptions method, HTMLQuickFormelement's findValue method, HTMLQuickFormelement's prepareValue method. that can...
PT-2018-15201
Name of the Vulnerable Software and Affected Versions PEAR HTML QuickForm versions 3.2.14 and earlier Description The issue concerns an eval injection that can lead to possible information disclosure, impact on data integrity, and execution of arbitrary code. This can be exploited via a specially...
Revive Adserver HTML_Quickform Library Security Bypass Vulnerability
Revive Adserver is an open source ad management system. Revive Adserver HTMLQuickform library has a security vulnerability that allows remote attackers can use empty tokens to bypass the CSRF protection mechanism...
PT-2015-7527
Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 3.2.2 Description The issue allows remote attackers to bypass the CSRF protection mechanism via an empty token. This is related to the HTML Quickform library used in Revive Adserver. Recommendations For versio...