EUVD-2013-7231

Malware in sbrugna...

EUVD-2013-7232

Malware in sbrugna...

CVE-2013-7473

Windu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.error to add an admin account...

CVE-2013-7474

Windu CMS 2.2 allows XSS via the name parameter to admin/content/edit or admin/content/add, or the username parameter to admin/users...

CVE-2013-7473

Windu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.error to add an admin account...

CVE-2013-7474

Windu CMS 2.2 allows XSS via the name parameter to admin/content/edit or admin/content/add, or the username parameter to admin/users...

Cross site scripting

Windu CMS 2.2 allows XSS via the name parameter to admin/content/edit or admin/content/add, or the username parameter to admin/users...

Cross site request forgery (csrf)

Windu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.error to add an admin account...

CVE-2013-7473

Windu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.error to add an admin account...

CVE-2013-7473

Windu CMS 2.2 is affected by a CSRF vulnerability that allows an attacker to add an admin account via admin/users/?mn=admin.message.error. The connected sources confirm the scenario but do not provide a concrete remediation or patched version in the provided documents. Exploitation status or in-t...

CVE-2013-7474

Windu CMS 2.2 is affected by a Cross-Site Scripting (XSS) vulnerability. The flaw allows injection via the name parameter in admin/content/edit or admin/content/add, or via the username parameter in admin/users. The NVD records show a CVSS base score of 4.3 (CS: Partial integrity impact, Network ...

CVE-2013-7474

Windu CMS 2.2 allows XSS via the name parameter to admin/content/edit or admin/content/add, or the username parameter to admin/users...

CVE-2013-7474: Improper Neutralization of Input During Web Page Generation

Windu CMS 2.2 allows XSS via the name parameter to admin/content/edit or admin/content/add, or the username parameter to admin/users...

PT-2019-7023

Name of the Vulnerable Software and Affected Versions Windu CMS version 2.2 Description The issue allows for cross-site scripting XSS attacks. This can be achieved via the name parameter to 'admin/content/edit' or 'admin/content/add' API endpoints, or the username parameter to the 'admin/users'...

CVE-2013-7473: Cross-Site Request Forgery (CSRF)

Windu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.error to add an admin account...

PT-2019-7022

Name of the Vulnerable Software and Affected Versions Windu CMS version 2.2 Description The issue allows for a Cross-Site Request Forgery CSRF attack via the "admin/users/?mn=admin.message.error" endpoint to add an admin account. Recommendations For Windu CMS version 2.2, as a temporary workaroun...

Windu CMS 2.2 - Multiple Vulnerabilities

No description provided by source. !-- Windu CMS 2.2 CSRF Add Admin Exploit Vendor: Adam Czajkowski Product web page: http://www.windu.org Affected version: 2.2 rev 1430 Summary: Windu CMS is a simple, lightweight and fun-to-use website content management software. Desc: Windu CMS suffers from a...

Windu CMS 2.2 - Multiple Vulnerabilities

Windu CMS 2.2 - Multiple Vulnerabilities Windu CMS 2.2 CSRF Add Admin Exploit input t...

Windu CMS 2.2 - Multiple Vulnerabilities

Windu CMS 2.2 CSRF Add Admin Exploit input type="hidden" name="email" value="evil@hac...

Windu CMS 2.2 Cross Site Request Forgery Vulnerability

Windu CMS version 2.2 suffers from a cross site request forgery vulnerability. Windu CMS 2.2 CSRF Add Admin Exploit form method="POST" action="http://localhost/winducms/a...