12 matches found
EUVD-2020-10369
Malware in sbrugna...
CVE-2020-18445
Cross Site Scripting XSS vulnerability exists in YUNUCMS 1.1.9 via the upurl function in Page.php...
CVE-2020-18445
Cross Site Scripting XSS vulnerability exists in YUNUCMS 1.1.9 via the upurl function in Page.php...
CVE-2020-18445
Cross Site Scripting XSS vulnerability exists in YUNUCMS 1.1.9 via the upurl function in Page.php...
CVE-2020-18445
Cross Site Scripting XSS vulnerability exists in YUNUCMS 1.1.9 via the upurl function in Page.php...
CVE-2020-18445
Cross Site Scripting XSS vulnerability exists in YUNUCMS 1.1.9 via the upurl function in Page.php...
PT-2021-10172
Name of the Vulnerable Software and Affected Versions: YUNUCMS version 1.1.9 Description: A Cross Site Scripting XSS issue exists via the upurl function in Page.php. This allows for potential malicious script execution. Recommendations: For YUNUCMS version 1.1.9, consider disabling the upurl...
CVE-2020-18445: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability exists in YUNUCMS 1.1.9 via the upurl function in Page.php...
YUNUCMS Cross-Site Script Vulnerabilities
YUNUCMS is a website CMS. A cross-site scripting vulnerability exists in YUNUCMS 1.1.9, which originates from the upurl function in Page.php...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in index.tmpl in Vuze formerly Azureus HTML WebUI, probably 0.7.6, allows remote attackers to hijack the authentication of users for requests that force the download of arbitrary torrent files via the upurl parameter...
CVE-2008-6587
Cross-site request forgery CSRF vulnerability in index.tmpl in Vuze formerly Azureus HTML WebUI, probably 0.7.6, allows remote attackers to hijack the authentication of users for requests that force the download of arbitrary torrent files via the upurl parameter...
CVE-2008-6587: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in index.tmpl in Vuze formerly Azureus HTML WebUI, probably 0.7.6, allows remote attackers to hijack the authentication of users for requests that force the download of arbitrary torrent files via the upurl parameter...