16 matches found
EUVD-2017-16274
Malware in sbrugna...
EUVD-2017-16239
Malware in sbrugna...
SLiMS 7 Cendana Cross-Site Scripting Vulnerability
SLiMS 7 Cendana is an open source, free library management system. A cross-site scripting vulnerability exists in the admin/modules component in SLiMS 7 Cendana on 2017-03-23 and earlier. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
CVE-2017-7242
Multiple Cross-Site Scripting XSS were discovered in admin/modules components in SLiMS 7 Cendana through 2017-03-23: the keywords parameter to bibliography/checkoutitem.php, bibliography/dlprint.php, bibliography/item.php, bibliography/itembarcodegenerator.php, bibliography/printedcard.php,...
Cross site scripting
Multiple Cross-Site Scripting XSS were discovered in admin/modules components in SLiMS 7 Cendana through 2017-03-23: the keywords parameter to bibliography/checkoutitem.php, bibliography/dlprint.php, bibliography/item.php, bibliography/itembarcodegenerator.php, bibliography/printedcard.php,...
CVE-2017-7242
Multiple Cross-Site Scripting XSS were discovered in admin/modules components in SLiMS 7 Cendana through 2017-03-23: the keywords parameter to bibliography/checkoutitem.php, bibliography/dlprint.php, bibliography/item.php, bibliography/itembarcodegenerator.php, bibliography/printedcard.php,...
CVE-2017-7242
Multiple Cross-Site Scripting XSS were discovered in admin/modules components in SLiMS 7 Cendana through 2017-03-23: the keywords parameter to bibliography/checkoutitem.php, bibliography/dlprint.php, bibliography/item.php, bibliography/itembarcodegenerator.php, bibliography/printedcard.php,...
CVE-2017-7242
CVE-2017-7242 is an XSS vulnerability in SLiMS 7 Cendana affecting multiple admin/modules components. The described flaws involve unsafely handling user-supplied input in the keywords parameter across several scripts (bibliography/checkout_item.php, bibliography/dl_print.php, bibliography/item.ph...
PT-2017-17603
Name of the Vulnerable Software and Affected Versions SLiMS 7 Cendana versions prior to 2017-03-23 Description Multiple Cross-Site Scripting XSS issues were found in the admin/modules components. The keywords parameter in several PHP files is vulnerable, including "bibliography/checkout item.php"...
CVE-2017-7242: Improper Neutralization of Input During Web Page Generation
Multiple Cross-Site Scripting XSS were discovered in admin/modules components in SLiMS 7 Cendana through 2017-03-23: the keywords parameter to bibliography/checkoutitem.php, bibliography/dlprint.php, bibliography/item.php, bibliography/itembarcodegenerator.php, bibliography/printedcard.php,...
Cross site scripting
Multiple Cross-Site Scripting XSS were discovered in SLiMS 7 Cendana before 2017-03-16. The vulnerabilities exist due to insufficient filtration of user-supplied data id passed to the 'slims7cendana-master/template/default/detailtemplate.php' and...
CVE-2017-7202
Multiple Cross-Site Scripting XSS were discovered in SLiMS 7 Cendana before 2017-03-16. The vulnerabilities exist due to insufficient filtration of user-supplied data id passed to the 'slims7cendana-master/template/default/detailtemplate.php' and...
CVE-2017-7202
Multiple Cross-Site Scripting XSS were discovered in SLiMS 7 Cendana before 2017-03-16. The vulnerabilities exist due to insufficient filtration of user-supplied data id passed to the 'slims7cendana-master/template/default/detailtemplate.php' and...
CVE-2017-7202
SLiMS 7 Cendana before 2017-03-16 contains XSS in two detail templates due to insufficient filtration of user-supplied id. Specifically, the vulnerability involves slims7_cendana-master/template/default/detail_template.php and slims7_cendana-master/template/default-rtl/detail_template.php, enabli...
CVE-2017-7202: Improper Neutralization of Input During Web Page Generation
Multiple Cross-Site Scripting XSS were discovered in SLiMS 7 Cendana before 2017-03-16. The vulnerabilities exist due to insufficient filtration of user-supplied data id passed to the 'slims7cendana-master/template/default/detailtemplate.php' and...
PT-2017-17571
Name of the Vulnerable Software and Affected Versions SLiMS 7 Cendana versions prior to 2017-03-16 Description The issue is related to insufficient filtration of user-supplied data, specifically the id variable, passed to the "slims7 cendana-master/template/default/detail template.php" and "slims...