EUVD-2018-4284

Malware in sbrugna...

Chamilo LMS 跨站脚本漏洞

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, distance training, and online question and answer sessions. A security vulnerability exists in Chamilo LMS version v.1.11.18. A local...

ASUSTOR ADM Cross-Site Scripting Vulnerability

ASUSTOR ADM is an operating system from ASUSTOR dedicated to ASUSTOR NAS storage devices. A cross-site scripting vulnerability exists in the login page of ASUSTOR ADM version 3.1.1. A remote attacker can exploit this vulnerability to execute JavaScript code via the System Announcement feature...

CVE-2018-12310

Cross-site scripting in the Login page in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript via the System Announcement feature...

CVE-2018-12310

Cross-site scripting in the Login page in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript via the System Announcement feature...

Cross site scripting

Cross-site scripting in the Login page in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript via the System Announcement feature...

CVE-2018-12310

CVE-2018-12310 describes a cross-site scripting vulnerability in ASUSTOR ADM (login page, version 3.1.1) where an attacker can inject JavaScript through the System Announcement feature. Affected component: ASUSTOR ADM login flow. Underlying issue: stored/reflected XSS in the login surface (detail...

CVE-2018-12310

Cross-site scripting in the Login page in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript via the System Announcement feature...

Cross site scripting

An issue was discovered in WUZHI CMS 4.1.0. The "Extension Module - System Announcement" feature has Stored XSS via an announcement...

CVE-2018-10368

An issue was discovered in WUZHI CMS 4.1.0. The "Extension Module - System Announcement" feature has Stored XSS via an announcement...

CVE-2018-10368

An issue was discovered in WUZHI CMS 4.1.0. The "Extension Module - System Announcement" feature has Stored XSS via an announcement...

PT-2018-9853 · Wuzhi · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: An issue was discovered in the "Extension Module - System Announcement" feature, which has Stored XSS via an announcement. Recommendations: For WUZHI CMS version 4.1.0, consider disabling the "Extension...