EUVD-2010-4846

Malware in sbrugna...

CVE-2024-37879

Improper input validation in /admin/config/save in User-friendly SVN USVN before v1.0.12 and below allows administrators to execute arbitrary code via the fields "siteTitle", "siteIco" and "siteLogo"...

CVE-2024-37879: Improper Neutralization of Input During Web Page Generation

Improper input validation in /admin/config/save in User-friendly SVN USVN before v1.0.12 and below allows administrators to execute arbitrary code via the fields "siteTitle", "siteIco" and "siteLogo"...

PT-2024-27805 · Usvn · Usvn

Name of the Vulnerable Software and Affected Versions: User-friendly SVN USVN versions prior to 1.0.12 Description: The issue is related to improper input validation in the /admin/config/save endpoint, allowing administrators to execute arbitrary code via the fields siteTitle, siteIco, and...

CVE-2024-37879

User-friendly SVN (USVN) versions prior to v1.0.12 are vulnerable to arbitrary code execution due to improper input validation in the /admin/config/save endpoint. An attacker can exploit the siteTitle, siteIco, and siteLogo fields to execute commands. The impact is significant as it allows for un...

XSS vulnerability in invite-users-panel.vm [$i18n.getText('easyuser.send.invitations.email.placeholder', [$siteTitle]), line 37]

Panopticon http://panopticon.dyn.syd.atlassian.com/ has detected that the following file contains a XSS vulnerability. This vulnerability has been manually confirmed. File: confluence-plugins/confluence-bundled-plugins/confluence-easyuser-admin/src/main/resources/templates/invite-users-panel.vm...

CVE-2010-4882

Cross-site scripting XSS vulnerability in autocms.php in Auto CMS 1.6 allows remote attackers to inject arbitrary web script or HTML via the sitetitle parameter...

PT-2011-1817

Name of the Vulnerable Software and Affected Versions Auto CMS version 1.6 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the sitetitle parameter in the autocms.php file. Recommendations For Auto CMS...

CVE-2010-4882: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in autocms.php in Auto CMS 1.6 allows remote attackers to inject arbitrary web script or HTML via the sitetitle parameter...

CVE-2008-2871: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in template2.php in PEGames allow remote attackers to inject arbitrary web script or HTML via the 1 sitetitle, 2 sitenav, 3 sitemain, and 4 sitealt parameters. NOTE: the provenance of this information is unknown; the details are obtained solely fr...

CVE-2005-3200: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Utopia News Pro UNP 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web script or HTML via 1 the sitetitle parameter in header.php and 2 the version and 3 querycount parameters in footer.php...