CVE-2018-11349

The CVE-2018-11349 entry concerns Jirafeau (administration panel) prior to 3.4.1, where three CSRF flaws affect search functions: search_by_name, search_by_hash, and search_link. The provided documents describe CSRF vulnerabilities (no exploitation details in the sources) and do not specify affec...

CVE-2018-11349: Cross-Site Request Forgery (CSRF)

The administration panel of Jirafeau before 3.4.1 is vulnerable to three CSRF attacks on search functionalities: searchbyname, searchbyhash, and searchlink...

CVE-2008-3841: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/searchlinks.php in Freeway eCommerce 1.4.1.171 allows remote attackers to inject arbitrary web script or HTML via the searchlink parameter...