EUVD-2018-3060

Malware in sbrugna...

EUVD-2018-3061

Malware in sbrugna...

CVE-2018-11011

ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...

CVE-2018-11012

ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java...

ruibaby Halo Stored Cross-Site Scripting Vulnerability

ruibaby Halo is a Java-based blogging system. A stored cross-site scripting vulnerability exists in ruibaby Halo 0.0.2. An attacker can exploit this vulnerability by using the loginName and loginPwd parameters of AdminController.java to conduct a cross-site scripting attack...

ruibaby Halo Cross-Site Scripting Vulnerability

ruibaby Halo is a Java-based blogging system. A cross-site scripting vulnerability exists in ruibaby Halo version 0.0.2. A remote attacker can inject arbitrary web script or HTML by sending the commentAuthor field to the FrontCommentController.java file...

CVE-2018-11011

ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...

CVE-2018-11011

ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...

CVE-2018-11011

CVE-2018-11011 affects ruibaby Halo 0.0.2 and is a stored XSS via the commentAuthor field directed at FrontCommentController.java. Affected component: Halo 0.0.2; root cause: improper handling of input in commentAuthor leading to script/HTML execution. Impact (per records): Confidentiality None, ...

CVE-2018-11012

ruibaby Halo 0.0.2 has a stored cross-site scripting vulnerability in which unsanitized input from loginName/loginPwd during a failed login to AdminController.java can be persisted and later executed in victims’ browsers. Public records list CVSS2 base 4.3 (MEDIUM) and CVSS3 base 6.1 (MEDIUM); no...

CVE-2018-11012

ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java...

CVE-2018-11011: Improper Neutralization of Input During Web Page Generation

ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...

CVE-2018-11012: Improper Neutralization of Input During Web Page Generation

ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java...