SUSE CVE-2017-7848

RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affects Thunderbird 52.5.2...

Code Injection

Mozilla Thunderbird is vulnerable to remote code execution vulnerability. RSS fields can inject new lines into the created email structure, modifying the message body...

DEBIAN-CVE-2017-7848

RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affects Thunderbird 52.5.2...

Design/Logic Flaw

RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affects Thunderbird 52.5.2...

CVE-2017-7848

RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affects Thunderbird 52.5.2...

CVE-2017-7848

RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affects Thunderbird 52.5.2...

CVE-2017-7848

CVE-2017-7848 affects Mozilla Thunderbird prior to 52.5.2. The issue allows RSS fields to inject new lines into the created email structure, altering the message body. Public entries and advisories confirm Thunderbird upgrades to 52.5.2 as the fix (e.g., CentOS/RHSA-2018:0061, Debian DSA-4075-1 a...

CVE-2017-7848

RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affects Thunderbird 52.5.2...

dedecms exploit summary-vulnerability warning-the black bar safety net

dedecms 5.6 rss injection vulnerability http://www.test.com/plus/rss.php?tid=1&Cs1=1&Cs2%20AND%2 0% 2 2% 2 7% 2 2%20AND%20updatexml%2 8 1,%28SELECT CONCAT%280x5b,uname,0x3a,MID%28pwd,4,1 6% 2 9,0x5d%2 9%20FROM%20dedeadmin%29,1%2 9%2 3'0=1 DedeCms v5. 6 embed malicious code execution vulnerability...

[Full-disclosure] RSS Injection in Sage part 2

RSS Injection is Sage part 2 2 months ago, both pdp and myself released a vulnerability and proof of concept exploit for Sage. see: http://michaeldaw.org/md-hacks/cross-context-scripting-with-sage/. This issue was resolved in Sage release 1.3.7 http://mozdev.org/bugs/showbug.cgi?id=15101. I found...