EUVD-2002-0283

Malware in sbrugna...

CVE-2020-36633

A vulnerability was found in moodle-blocksitenews 1.0. It has been classified as problematic. This affects the function getcontent of the file blocksitenews.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 1.1 is able ...

moodle-block_sitenews 跨站请求伪造漏洞

moodle-blocksitenews is a library by Jan Eberhardt, a personal developer. It is used to display site news at full scale on the home page. A cross-site request forgery vulnerability exists in moodle-blocksitenews version 1.0. An attacker can exploit this vulnerability to perform cross-site request...

PT-2022-9027 · Moodle · Moodle-Block Sitenews

Name of the Vulnerable Software and Affected Versions: moodle-block sitenews version 1.0 Description: A vulnerability was found in the get content function of the block sitenews.php file, leading to cross-site request forgery. The attack can be initiated remotely. Recommendations: For moodle-bloc...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbitrary web script or HTML via the 1 frontend, 2 setfrontend, 3 jzpath, 4 theme, and 5 settheme parameters to a index.php; the frontend, theme, and 6 language parameters to b...

CVE-2002-0286

The GetPassword function in function.php of SiteNews 0.10 and 0.11 allows remote attackers to gain privileges and add users by providing a non-existent user name and the MD5 checksum for an empty password to adduser.php, which causes GetPassword to produce and compare a blank password for the...

CVE-2002-0286

The CVE affects SiteNews 0.10 and 0.11. In function.php, the GetPassword routine can be abused when a remote attacker supplies a non-existent username and the MD5 checksum of an empty password to add_user.php. This causes GetPassword to generate and compare a blank password for the non-existent u...

CVE-2002-0286

The GetPassword function in function.php of SiteNews 0.10 and 0.11 allows remote attackers to gain privileges and add users by providing a non-existent user name and the MD5 checksum for an empty password to adduser.php, which causes GetPassword to produce and compare a blank password for the...