217 matches found
CVE-2011-4322: Missing Authentication for Critical Function
websitebaker prior to and including 2.8.1 has an authentication error in backup module...
CVE-2011-2933
An Arbitrary File Upload vulnerability exists in admin/media/upload.php in WebsiteBaker 2.8.1 and earlier due to a failure to restrict uploaded files with .htaccess, .php4, .php5, and .phtl extensions...
CVE-2011-2934
A Cross Site Request Forgery CSRF vulnerability exists in the administrator functions in WebsiteBaker 2.8.1 and earlier due to inadequate confirmation for sensitive transactions...
Cross site request forgery (csrf)
A Cross Site Request Forgery CSRF vulnerability exists in the administrator functions in WebsiteBaker 2.8.1 and earlier due to inadequate confirmation for sensitive transactions...
Privilege escalation
An Arbitrary File Upload vulnerability exists in admin/media/upload.php in WebsiteBaker 2.8.1 and earlier due to a failure to restrict uploaded files with .htaccess, .php4, .php5, and .phtl extensions...
CVE-2011-2933
CVE-2011-2933: Affected software is WebsiteBaker 2.8.1 and earlier. The vulnerability is an Arbitrary File Upload in admin/media/upload.php caused by failure to restrict uploaded files with extensions .htaccess, .php4, .php5, and .phtl. Connected sources confirm this现. The provided documents do n...
CVE-2011-2933
An Arbitrary File Upload vulnerability exists in admin/media/upload.php in WebsiteBaker 2.8.1 and earlier due to a failure to restrict uploaded files with .htaccess, .php4, .php5, and .phtl extensions...
CVE-2011-2934
A Cross Site Request Forgery CSRF vulnerability exists in the administrator functions in WebsiteBaker 2.8.1 and earlier due to inadequate confirmation for sensitive transactions...
CVE-2011-2934
CVE-2011-2934 describes a Cross Site Request Forgery (CSRF) vulnerability in the administrator functions of WebsiteBaker 2.8.1 and earlier, caused by inadequate confirmation for sensitive transactions. The connected records confirm affected software (WebsiteBaker 2.8.1 and earlier) and the root c...
PT-2020-7113
Name of the Vulnerable Software and Affected Versions WebsiteBaker versions 2.8.1 and earlier Description A Cross Site Request Forgery CSRF issue exists in the administrator functions due to inadequate confirmation for sensitive transactions. Recommendations For versions 2.8.1 and earlier, consid...
CVE-2011-2933: Unrestricted Upload of File with Dangerous Type
An Arbitrary File Upload vulnerability exists in admin/media/upload.php in WebsiteBaker 2.8.1 and earlier due to a failure to restrict uploaded files with .htaccess, .php4, .php5, and .phtl extensions...
CVE-2011-2934: Cross-Site Request Forgery (CSRF)
A Cross Site Request Forgery CSRF vulnerability exists in the administrator functions in WebsiteBaker 2.8.1 and earlier due to inadequate confirmation for sensitive transactions...
PT-2020-7112
Name of the Vulnerable Software and Affected Versions WebsiteBaker versions 2.8.1 and earlier Description An Arbitrary File Upload issue exists due to a failure to restrict uploaded files with certain extensions, such as .htaccess, .php4, .php5, and .phtl. This issue is related to the...
CVE-2017-16514
Multiple persistent stored Cross-Site-Scripting XSS vulnerabilities in the files /wb/admin/admintools/tool.php Droplet Description and /install/index.php Site Title in WebsiteBaker 2.10.0 allow attackers to insert persistent JavaScript code that gets reflected back to users in multiple areas in t...
CVE-2017-16514
Multiple persistent stored Cross-Site-Scripting XSS vulnerabilities in the files /wb/admin/admintools/tool.php Droplet Description and /install/index.php Site Title in WebsiteBaker 2.10.0 allow attackers to insert persistent JavaScript code that gets reflected back to users in multiple areas in t...
Cross site scripting
Multiple persistent stored Cross-Site-Scripting XSS vulnerabilities in the files /wb/admin/admintools/tool.php Droplet Description and /install/index.php Site Title in WebsiteBaker 2.10.0 allow attackers to insert persistent JavaScript code that gets reflected back to users in multiple areas in t...
CVE-2017-16514
Multiple persistent stored Cross-Site-Scripting XSS vulnerabilities in the files /wb/admin/admintools/tool.php Droplet Description and /install/index.php Site Title in WebsiteBaker 2.10.0 allow attackers to insert persistent JavaScript code that gets reflected back to users in multiple areas in t...
CVE-2017-16514
CVE-2017-16514 affects WebsiteBaker 2.10.0, with multiple persistent stored XSS vulnerabilities in the files /wb/admin/admintools/tool.php and /install/index.php. The root cause is persistent JavaScript code being stored and reflected back to users in various areas of the application. Exploitatio...
PT-2018-6283
Name of the Vulnerable Software and Affected Versions: WebsiteBaker version 2.10.0 Description: The issue concerns multiple persistent stored Cross-Site-Scripting XSS vulnerabilities. These vulnerabilities are located in the files /wb/admin/admintools/tool.php, related to the Droplet Description,...
CVE-2017-16514: Improper Neutralization of Input During Web Page Generation
Multiple persistent stored Cross-Site-Scripting XSS vulnerabilities in the files /wb/admin/admintools/tool.php Droplet Description and /install/index.php Site Title in WebsiteBaker 2.10.0 allow attackers to insert persistent JavaScript code that gets reflected back to users in multiple areas in t...