EUVD-2018-3060

Malware in sbrugna...

EUVD-2018-3061

Malware in sbrugna...

CVE-2018-11011

ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...

CVE-2018-11012

ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java...

ruibaby Halo Cross-Site Scripting Vulnerability

ruibaby Halo is a Java-based blogging system. A cross-site scripting vulnerability exists in ruibaby Halo version 0.0.2. A remote attacker can inject arbitrary web script or HTML by sending the commentAuthor field to the FrontCommentController.java file...

ruibaby Halo Stored Cross-Site Scripting Vulnerability

ruibaby Halo is a Java-based blogging system. A stored cross-site scripting vulnerability exists in ruibaby Halo 0.0.2. An attacker can exploit this vulnerability by using the loginName and loginPwd parameters of AdminController.java to conduct a cross-site scripting attack...

CVE-2018-11011

ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...

CVE-2018-11011

ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...

CVE-2018-11012

ruibaby Halo 0.0.2 has a stored cross-site scripting vulnerability in which unsanitized input from loginName/loginPwd during a failed login to AdminController.java can be persisted and later executed in victims’ browsers. Public records list CVSS2 base 4.3 (MEDIUM) and CVSS3 base 6.1 (MEDIUM); no...

CVE-2018-11011

CVE-2018-11011 affects ruibaby Halo 0.0.2 and is a stored XSS via the commentAuthor field directed at FrontCommentController.java. Affected component: Halo 0.0.2; root cause: improper handling of input in commentAuthor leading to script/HTML execution. Impact (per records): Confidentiality None, ...

CVE-2018-11012

ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java...

CVE-2018-11012

ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java...

CVE-2018-11012: Improper Neutralization of Input During Web Page Generation

ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java...

PT-2018-10239

Name of the Vulnerable Software and Affected Versions ruibaby Halo version 0.0.2 Description The issue is related to stored XSS via the commentAuthor field. This field is used in the FrontCommentController.java file, allowing for potential exploitation. Recommendations For ruibaby Halo version...

CVE-2018-11011: Improper Neutralization of Input During Web Page Generation

ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...

PT-2018-10240

Name of the Vulnerable Software and Affected Versions ruibaby Halo version 0.0.2 Description The issue concerns a stored XSS that occurs via the loginName and loginPwd parameters in a failed login attempt. This is related to the AdminController.java. Recommendations For ruibaby Halo version 0.0.2...