EUVD-2018-4579

Malware in sbrugna...

PT-2024-26541 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the component /admin/share switch.php. The affected endpoint includes parameters such as mudi, dataType, fieldName, fieldName2, tabName, and dataID...

CVE-2018-12623

An issue was discovered in Eventum 3.5.0. htdocs/switch.php has XSS via the currentpage parameter...

CVE-2018-12623

An issue was discovered in Eventum 3.5.0. htdocs/switch.php has XSS via the currentpage parameter...

CVE-2018-12623: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Eventum 3.5.0. htdocs/switch.php has XSS via the currentpage parameter...

PT-2019-8907

Name of the Vulnerable Software and Affected Versions Eventum version 3.5.0 Description An issue was discovered in the htdocs/switch.php file, where there is a cross-site scripting XSS vulnerability via the current page parameter. This allows for potential malicious script execution...

CVE-2018-12621

An issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the currentpage parameter...

CVE-2018-12621

An issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the currentpage parameter...

Open redirect

An issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the currentpage parameter...

CVE-2018-12621

CVE-2018-12621 affects Eventum 3.5.0 with an Open Redirect in /htdocs/switch.php via the current_page parameter. The issue enables redirection to arbitrary URLs. No explicit remediation or patch version is provided in the connected documents; details about exploit availability or mitigations are ...

CVE-2018-12621

An issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the currentpage parameter...

CVE-2018-12621

An issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the currentpage parameter...

PT-2019-8905

Name of the Vulnerable Software and Affected Versions Eventum version 3.5.0 Description An issue was discovered in the software, where the /htdocs/switch.php file has an Open Redirect via the current page parameter. Recommendations For version 3.5.0, consider restricting access to the...

CVE-2018-12621: URL Redirection to Untrusted Site

An issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the currentpage parameter...

PT-2019-17665

Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 4.2.0 Description A phishing attack could be conducted by tricking a user into clicking a specifically crafted admin account-switch.php URL, potentially leading to credential theft or other phishing attacks...

CVE-2019-5433: URL Redirection to Untrusted Site

A user having access to the UI of a Revive Adserver instance could be tricked into clicking on a specifically crafted admin account-switch.php URL that would eventually lead them to another unsafe domain, potentially used for stealing credentials or other phishing attacks. This vulnerability was...

PT-2018-13886

Name of the Vulnerable Software and Affected Versions OTCMS version 3.61 Description A security issue was found in OTCMS, where a cross-site scripting XSS attack can be executed. This issue is located in the admin/share switch.php file and is triggered by the fieldName, fieldName2, and tabName...

Open redirect

Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the 1 r parameter to switch.php or 2 goto parameter to admin/login.php...

CVE-2012-0865: Improper Input Validation

Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the 1 r parameter to switch.php or 2 goto parameter to admin/login.php...

PT-2012-2918

Name of the Vulnerable Software and Affected Versions CubeCart versions 3.0.20 and earlier Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. This can be achieved via a URL in the r parameter to "switch.php" or the goto parameter t...