Malicious code in epc-staticpages-web (npm)

--- -= Per source details. Do not edit below this line.=-...

Code injection

ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS aka Internet Campus Solution before 2019-02-06 allows remote attackers to create an arbitrary number of accounts with a password of 1234...

CVE-2019-10011

CVE-2019-10011 affects Jenzabar JICS (Internet Campus Solution): ICS/StaticPages/AddTestUsers.aspx allows remote account creation with a password of 1234 prior to 2019-02-06. Connected sources (Red Hat, NVD, CVE lists) corroborate the same description. The documentation does not provide a patch v...

CVE-2019-10011: Use of Hard-coded Credentials

ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS aka Internet Campus Solution before 2019-02-06 allows remote attackers to create an arbitrary number of accounts with a password of 1234...

Easy Publish 3.0 Cross Site Scripting

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

CVE-2008-3348

Cross-site scripting XSS vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition tr allows remote attackers to inject arbitrary web script or HTML via the year parameter...

CVE-2008-3344: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition tr and 3.10a allow remote attackers to inject arbitrary web script or HTML via the 1 ResultHtml, 2 dir, 3 SenderName, 4 RecipientName, 5 SenderMail, and 6 RecipientMail...

CVE-2008-3348: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition tr allows remote attackers to inject arbitrary web script or HTML via the year parameter...

CVE-2008-3347: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition tr allows remote attackers to execute arbitrary SQL commands via the read parameter...

CVE-2008-3342: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edpNews action...

CVE-2008-1649: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in staticpages/easypublish/index.php in EasyNews 4.0 allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edppupublish action...

CVE-2008-1347

CVE-2008-1347 involves multiple XSS vulnerabilities in the MyioSoft EasyGallery 5.0tr and earlier. The affected component is staticpages/easygallery/index.php , where an attacker can trigger script/HTML injection via the PATH_INFO or the q parameter in the about action of the help system. This en...

CVE-2008-1347: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO or 2 the q parameter in an about action to the help system...