Video on Admin Dashboard < 1.1.4 - Authenticated Stored XSS

Video on Admin Dashboard is vulnerable to stored XSS. When a user has admin capabilities, malicious code can be submitted through the plugin's options. A user can insert a simple script in the Widget Title text field, e.g. "alert'XSS';. Every specified user role by the plugin will now be targeted...

WordPress FooGallery Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress FooGallery. An attacker can exploit this vulnerability to allow XSS...

CVE-2019-20184

KeePass 2.4.1 allows CSV injection in the title field of a CSV export...

CVE-2019-20182

The FooGallery plugin 1.8.12 for WordPress allow XSS via the posttitle parameter...

CVE-2019-20184

KeePass 2.4.1 allows CSV injection in the title field of a CSV export...

Design/Logic Flaw

KeePass 2.4.1 allows CSV injection in the title field of a CSV export...

CVE-2019-20184

KeePass 2.4.1 allows CSV injection in the title field of a CSV export...

CVE-2019-20184

CVE-2019-20184 affects KeePass 2.4.1 and concerns CSV injection in the title field of a CSV export. The connected documents consistently describe this issue for KeePass 2.4.1, but do not provide specifics on the root cause beyond classifying it as a CSV injection vulnerability, nor details on aff...

CVE-2019-20184

KeePass 2.4.1 allows CSV injection in the title field of a CSV export...

KeePass CSV Injection Vulnerability

KeePass is a free open source password manager that helps you manage your passwords in a secure way. A CSV injection vulnerability exists in KeePass 2.4.1 and earlier versions, which can be exploited by an attacker to conduct a CSV injection attack via the title field of a CSV export...

EBBISLAND EBBSHAVE 6100-09-04-1441 Remote Buffer Overflow

Exploit Title: EBBISLAND EBBSHAVE 6100-09-04-1441 - Remote Buffer Overflow Date: 2018-09-19 Exploit Author: Harrison Neal Vendor Homepage: https://www.ibm.com/us-en/ Version: 6100-09-04-1441, 7100-03-05-1524, 7100-04-00-0000, 7200-01-01-1642 Tested on: IBM AIX PPC CVE: CVE-2017-3623 EBBISLAND /...

Voyager 1.3.0 - Directory Traversal Vulnerability

Exploit for php platform in category web applications Exploit Title: Voyager 1.3.0 - Directory Traversal Exploit Author: NgoAnhDuc Vendor Homepage: https://voyager.devdojo.com/ Software...

Cross site scripting

Codoforum 4.8.3 allows XSS via a post using parameters display name, title name, or content...

CVE-2020-5306

Codoforum 4.8.3 allows XSS via a post using parameters display name, title name, or content...

MGASA-2020-0021 Updated mediawiki packages fix security vulnerability

Updated mediawiki packages fix security vulnerability: MediaWiki through 1.33.1 allows attackers to bypass the Titleblacklist protection mechanism by starting with an arbitrary title, establishing a non-resolvable redirect for the associated page, and using redirect=1 in the action API when editi...

PT-2020-18395 · Codoforum · Codoforum

Name of the Vulnerable Software and Affected Versions: Codoforum version 4.8.3 Description: The issue allows for XSS attacks through posts using parameters such as display name, title name, or content. Recommendations: For Codoforum version 4.8.3, update to a newer version that contains a fix for...

MediaWiki Input Validation Error Vulnerability (CNVD-2020-00008)

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. An input validation error vulnerability exists in MediaWiki version 1.33.1 an...

CVE-2019-9553

Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933...

CVE-2019-9553

Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933...

elearning-script 1.0 - Authentication Bypass Vulnerability

Exploit for windows platform in category web applications Exploit Title: elearning-script 1.0 - Authentication Bypass Author: riamloo Vendor Homepage: https://github.com/amitkolloldey/elearning-script Software Link: https://github.com/amitkolloldey/elearning-script/archive/master.zip Version: 1...