EUVD-2010-4846

Malware in sbrugna...

CVE-2024-37879: Improper Neutralization of Input During Web Page Generation

Improper input validation in /admin/config/save in User-friendly SVN USVN before v1.0.12 and below allows administrators to execute arbitrary code via the fields "siteTitle", "siteIco" and "siteLogo"...

PT-2024-27805 · Usvn · Usvn

Name of the Vulnerable Software and Affected Versions: User-friendly SVN USVN versions prior to 1.0.12 Description: The issue is related to improper input validation in the /admin/config/save endpoint, allowing administrators to execute arbitrary code via the fields siteTitle, siteIco, and...

CVE-2024-37879

The User-friendly SVN (USVN) tool is vulnerable to arbitrary code execution in versions prior to v1.0.12 . The root cause is improper input validation within the /admin/config/save endpoint, specifically affecting the siteTitle, siteIco, and siteLogo fields. This vulnerability can be exploited by...

XSS vulnerability in invite-users-panel.vm [$i18n.getText('easyuser.send.invitations.email.placeholder', [$siteTitle]), line 37]

Panopticon http://panopticon.dyn.syd.atlassian.com/ has detected that the following file contains a XSS vulnerability. This vulnerability has been manually confirmed. File: confluence-plugins/confluence-bundled-plugins/confluence-easyuser-admin/src/main/resources/templates/invite-users-panel.vm...

CVE-2010-4882

Cross-site scripting XSS vulnerability in autocms.php in Auto CMS 1.6 allows remote attackers to inject arbitrary web script or HTML via the sitetitle parameter...

CVE-2010-4882: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in autocms.php in Auto CMS 1.6 allows remote attackers to inject arbitrary web script or HTML via the sitetitle parameter...

CVE-2008-2871: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in template2.php in PEGames allow remote attackers to inject arbitrary web script or HTML via the 1 sitetitle, 2 sitenav, 3 sitemain, and 4 sitealt parameters. NOTE: the provenance of this information is unknown; the details are obtained solely fr...

CVE-2005-3200: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Utopia News Pro UNP 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web script or HTML via 1 the sitetitle parameter in header.php and 2 the version and 3 querycount parameters in footer.php...