EUVD-2018-8455

Malware in sbrugna...

EUVD-2018-6721

Malware in sbrugna...

CVE-2018-14838

rejucms 2.1 has stored XSS via the admin/book.php content parameter...

Login Bypass Vulnerability in rejucms v2.1 Backend

rejucms is an online video web content management system CMS. A login bypass vulnerability exists in the backend of rejucms v2.1, which is caused by the failure of the program to authenticate login information, and can be exploited by an attacker to bypass login restrictions...

CVE-2018-16653

rejucms 2.1 has XSS via the ucenter/cmsuseradd.php uname parameter...

Design/Logic Flaw

rejucms 2.1 has XSS via the ucenter/cmsuseradd.php uname parameter...

CVE-2018-16653

rejucms 2.1 has XSS via the ucenter/cmsuseradd.php uname parameter...

CVE-2018-16653

rejucms 2.1 has XSS via the ucenter/cmsuseradd.php uname parameter...

CVE-2018-16653

CVE-2018-16653 affects rejucms 2.1, with an XSS vulnerability in the ucenter/cms_user_add.php u_name parameter. Root cause is insufficient input filtering. Impact is user-side script execution in contexts where the affected page is rendered; CVSS metrics are provided (CVSS2: 4.3; CVSS3: 6.1), but...

rejucms cross-site scripting vulnerability (CNVD-2018-19433)

rejucms is an online video web content management system CMS. A cross-site scripting vulnerability exists in rejucms version 2.1, which stems from the program's failure to enforce strict filtering. The vulnerability can be exploited to inject arbitrary web script or HTML by sending the 'uname'...

CVE-2018-16653: Improper Neutralization of Input During Web Page Generation

rejucms 2.1 has XSS via the ucenter/cmsuseradd.php uname parameter...

PT-2018-13674

Name of the Vulnerable Software and Affected Versions rejucms version 2.1 Description The issue allows for XSS via the u name parameter in the "ucenter/cms user add.php" API endpoint. Recommendations For rejucms version 2.1, avoid using the u name parameter in the "ucenter/cms user add.php"...

rejucms cross-site scripting vulnerability

rejucms is an online video web content management system CMS. A cross-site scripting vulnerability exists in rejucms version 2.1. A remote attacker can inject arbitrary web script or HTML by sending the 'content' parameter to the admin/book.php URL...

CVE-2018-14838

rejucms 2.1 has stored XSS via the admin/book.php content parameter...

CVE-2018-14838

rejucms 2.1 has stored XSS via the admin/book.php content parameter...

Cross site scripting

rejucms 2.1 has stored XSS via the admin/book.php content parameter...

CVE-2018-14838

rejucms 2.1 has stored XSS via the admin/book.php content parameter...

CVE-2018-14838

CVE-2018-14838 affects rejucms 2.1 and is a stored XSS vulnerability in the admin/book.php content parameter. The issue allows injection of script/HTML through that parameter, leading to potential script execution in the context of the affected CMS. No explicit mitigation or patch details are pro...

CVE-2018-14838: Improper Neutralization of Input During Web Page Generation

rejucms 2.1 has stored XSS via the admin/book.php content parameter...

PT-2018-12756

Name of the Vulnerable Software and Affected Versions rejucms version 2.1 Description The issue is related to stored XSS, which occurs via the content parameter in the "admin/book.php" endpoint. Recommendations For rejucms version 2.1, avoid using the content parameter in the "admin/book.php"...