EUVD-2018-3060

Malware in sbrugna...

EUVD-2018-3061

Malware in sbrugna...

CVE-2018-11011

ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...

CVE-2018-11012

ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java...

ruibaby Halo Stored Cross-Site Scripting Vulnerability

ruibaby Halo is a Java-based blogging system. A stored cross-site scripting vulnerability exists in ruibaby Halo 0.0.2. An attacker can exploit this vulnerability by using the loginName and loginPwd parameters of AdminController.java to conduct a cross-site scripting attack...

ruibaby Halo Cross-Site Scripting Vulnerability

ruibaby Halo is a Java-based blogging system. A cross-site scripting vulnerability exists in ruibaby Halo version 0.0.2. A remote attacker can inject arbitrary web script or HTML by sending the commentAuthor field to the FrontCommentController.java file...

CVE-2018-11011

ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...

CVE-2018-11011

ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...

CVE-2018-11012

ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java...

CVE-2018-11011: Improper Neutralization of Input During Web Page Generation

ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...

CVE-2018-11012: Improper Neutralization of Input During Web Page Generation

ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java...