14 matches found
EUVD-2018-3061
Malware in sbrugna...
EUVD-2018-3060
Malware in sbrugna...
CVE-2018-11011
ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...
CVE-2018-11012
ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java...
ruibaby Halo Stored Cross-Site Scripting Vulnerability
ruibaby Halo is a Java-based blogging system. A stored cross-site scripting vulnerability exists in ruibaby Halo 0.0.2. An attacker can exploit this vulnerability by using the loginName and loginPwd parameters of AdminController.java to conduct a cross-site scripting attack...
ruibaby Halo Cross-Site Scripting Vulnerability
ruibaby Halo is a Java-based blogging system. A cross-site scripting vulnerability exists in ruibaby Halo version 0.0.2. A remote attacker can inject arbitrary web script or HTML by sending the commentAuthor field to the FrontCommentController.java file...
CVE-2018-11011
ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...
CVE-2018-11011
ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...
CVE-2018-11012
ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java...
CVE-2018-11012
ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java...
PT-2018-10239
Name of the Vulnerable Software and Affected Versions ruibaby Halo version 0.0.2 Description The issue is related to stored XSS via the commentAuthor field. This field is used in the FrontCommentController.java file, allowing for potential exploitation. Recommendations For ruibaby Halo version...
CVE-2018-11012: Improper Neutralization of Input During Web Page Generation
ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java...
PT-2018-10240
Name of the Vulnerable Software and Affected Versions ruibaby Halo version 0.0.2 Description The issue concerns a stored XSS that occurs via the loginName and loginPwd parameters in a failed login attempt. This is related to the AdminController.java. Recommendations For ruibaby Halo version 0.0.2...