CVE-2026-51954

Prodotto: Webasyst Framework Versione interessata: ≤ 4.0.3 Gravità: Alta CVSS 3.1: 8.0 Descrizione Il framework Webasyst fino alla versione 4.0.3 contiene un difetto nell'implementazione di OAuth 2.0 che consente a un attaccante remoto non autenticato di intercettare le credenziali di...

EUVD-2014-8214

Malware in sbrugna...

EUVD-2010-4824

Malware in sbrugna...

EUVD-2010-1490

Malware in sbrugna...

EUVD-2010-1491

Malware in sbrugna...

EUVD-2010-1489

Malware in sbrugna...

CVE-2024-29413

Cross Site Scripting vulnerability in Webasyst v.2.9.9 allows a remote attacker to run arbitrary code via the Instant messenger field in the Contact info function...

CVE-2024-27517

Webasyst 2.9.9 has a Cross-Site Scripting XSS vulnerability, Attackers can create blogs containing malicious code after gaining blog permissions...

CVE-2024-29413

Cross Site Scripting vulnerability in Webasyst v.2.9.9 allows a remote attacker to run arbitrary code via the Instant messenger field in the Contact info function...

Webasyst 跨站脚本漏洞

Webasyst is an open source PHP framework from Webasyst Inc. A cross-site scripting vulnerability exists in Webasyst version v.2.9.9 that could allow a remote attacker to run arbitrary code via the Instant messenger field in the Contact info function...

CVE-2024-29413

Cross Site Scripting vulnerability in Webasyst v.2.9.9 allows a remote attacker to run arbitrary code via the Instant messenger field in the Contact info function...

CVE-2024-29413

Cross Site Scripting vulnerability in Webasyst v.2.9.9 allows a remote attacker to run arbitrary code via the Instant messenger field in the Contact info function...

CVE-2024-29413

CVE-2024-29413 affects Webasyst v2.9.9. A Cross Site Scripting vulnerability in the Instant messenger field of the Contact info function could allow a remote attacker to run arbitrary code. The provided documents consistently describe the same issue with Webasyst 2.9.9 and do not provide explicit...

CVE-2024-27517

Webasyst 2.9.9 has a Cross-Site Scripting XSS vulnerability, Attackers can create blogs containing malicious code after gaining blog permissions...

Cross site scripting

Webasyst 2.9.9 has a Cross-Site Scripting XSS vulnerability, Attackers can create blogs containing malicious code after gaining blog permissions...

Webasyst Security Vulnerabilities

Webasyst is an open source PHP framework from Webasyst. A security vulnerability exists in Webasyst version 2.9.9. An attacker exploiting this vulnerability could create blogs containing malicious code after gaining blogging privileges...

CVE-2024-27517

Webasyst 2.9.9 has a Cross-Site Scripting XSS vulnerability, Attackers can create blogs containing malicious code after gaining blog permissions...

CVE-2024-27517

Webasyst 2.9.9 has a Cross-Site Scripting XSS vulnerability, Attackers can create blogs containing malicious code after gaining blog permissions...

CVE-2024-27517

CVE-2024-27517 affects Webasyst 2.9.9 with a Cross-Site Scripting (XSS) vulnerability that allows attackers to insert malicious code in blogs after gaining blog permissions. Root cause details are not explicitly provided in the sources; impact is described as enabling creation of blogs containing...

PT-2024-21927 · Webasyst · Webasyst

Name of the Vulnerable Software and Affected Versions: Webasyst version 2.9.9 Description: The issue allows attackers to create blogs containing malicious code after gaining blog permissions, which can lead to a Cross-Site Scripting XSS attack. Recommendations: For Webasyst version 2.9.9, conside...