EUVD-2017-16413

Malware in sbrugna...

Symetrie Cross-Site Scripting Vulnerability

Symetrie is a set of tools that supports in-place editing and building websites without using a sql database. A cross-site scripting vulnerability exists in the symetrie-master/app/commands/page.php file in symetrie version 0.9.6. A remote attacker can exploit this vulnerability to inject arbitra...

CVE-2017-7386

citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php model parameter...

Cross site scripting

citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php model parameter...

CVE-2017-7386

citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php model parameter...

CVE-2017-7386

citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php model parameter...

CVE-2017-7386

CVE-2017-7386 affects citymont/symetrie v.0.9.6, which is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php (model parameter). The root cause is a reflected XSS in the page.php handler for the model parameter. Documented impact is that arbitrary script/HTML could be injected ...