7 matches found
PT-2022-13811
Name of the Vulnerable Software and Affected Versions pimcore/pimcore versions prior to 10.3.5 Description The issue is related to SQL injection in ElementController.php. This allows for the theft of data and causes loss of data confidentiality. Recommendations For versions prior to 10.3.5, updat...
PT-2020-13204
Name of the Vulnerable Software and Affected Versions Interchange versions 4.7.0 through 5.11.x Description The issue allows remote attackers to steal credentials or data via browser JavaScript, specifically through XSS in the admin help system, affecting "admin/help.html" and...
PT-2018-8562
Name of the Vulnerable Software and Affected Versions: Junos Space affected versions not specified Description: A reflected cross site scripting XSS issue may allow a remote authenticated user to inject web script or HTML, potentially leading to the theft of sensitive data and credentials from a...
PLANET ADSL Router AND-4101 - Remote File Disclosure
PLANET ADSL Router AND-4101 - Remote File Disclosure !/bin/sh PLANET ADSL ROUTER AND-4101 v1.8 Remote File Disclosure Modem Name: ADN-4101 HardwareVersion: ADN-4101 SoftwareVersion: V1.8 Firmware Version: V1.8 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/...
mod_pagespeed -- critical cross-site scripting (XSS) vulnerability
modpagespeed developers report: Various versions of modpagespeed are subject to critical cross-site scripting XSS vulnerability, CVE-2013-6111. This permits a hostile third party to execute JavaScript in users' browsers in context of the domain running modpagespeed, which could permit theft of...
BLOG:CMS 4.2.1e Cross Site Request Forgery / Cross Site Scripting
Vulnerability ID: HTB22727 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinblogcms.html Product: BLOG:CMS Vendor: Radek Hulán http://blogcms.com/ Vulnerable Version: 4.2.1.e and probably prior versions Vendor Notification: 30 November 2010 Vulnerability Type: CSRF Cross-Site Request Forgery...
Contenido CMS 4.8.12 - Cross-Site Scripting
Vulnerability ID: HTB22635 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincontenidocms.html Product: Contenido CMS Vendor: four for business AG http://www.contenido.org/ Vulnerable Version: 4.8.12 and Probably Prior Versions Vendor Notification: 29 September 2010 Vulnerability Type:...