CVE-2023-44812

mooSocial v3.1.8 is affected by CVE-2023-44812: a Cross-Site Scripting (XSS) flaw allowing remote execution of script via the admin_redirect_url parameter in the user login function. The vulnerability stems from improper handling of input in that parameter, enabling an attacker to run arbitrary s...

PT-2023-29300 · Moosocial · Moosocial

Name of the Vulnerable Software and Affected Versions: mooSocial version 3.1.8 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the admin redirect url parameter of the user login function. This is a Cross Site Scripting XSS issue. Recommendations:...

CVE-2013-1364

The user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers to override LDAP configuration via the cnf parameter...