EUVD-2002-1516

Malware in sbrugna...

EUVD-2021-17087

Malware in sbrugna...

CVE-2021-30150

Composr 10.0.36 allows XSS in an XML script...

XML External Entity Injection (XXE)

org.xwiki.commons:xwiki-commons-xml is vulnerable to XML external entity injection XXE. A remote authenticated attacker is able to inject a specifically crafted script through the XML script service to gain access to sensitive user information...

CVE-2022-24898

org.xwiki.commons:xwiki-commons-xml is a common module used by other XWiki top level projects. Starting in version 2.7 and prior to versions 12.10.10, 13.4.4, and 13.8-rc-1, it is possible for a script to access any file accessing to the user running XWiki application server with XML External...

PT-2022-16967

Name of the Vulnerable Software and Affected Versions xwiki-commons-xml versions 2.7 through 12.10.9 xwiki-commons-xml versions 13.0.0 through 13.4.3 xwiki-commons-xml versions 13.8-rc-0 and earlier Description The issue allows a script to access any file accessible to the user running the XWiki...

CVE-2022-24898: Improper Restriction of XML External Entity Reference

org.xwiki.commons:xwiki-commons-xml is a common module used by other XWiki top level projects. Starting in version 2.7 and prior to versions 12.10.10, 13.4.4, and 13.8-rc-1, it is possible for a script to access any file accessing to the user running XWiki application server with XML External...

CVE-2021-30150

Composr 10.0.36 allows XSS in an XML script...

CVE-2021-30150

Composr 10.0.36 allows XSS in an XML script...

CVE-2021-30150

Composr 10.0.36 allows XSS in an XML script...

CVE-2021-30150

Composr 10.0.36 allows XSS in an XML script...

PT-2021-18634

Name of the Vulnerable Software and Affected Versions Composr version 10.0.36 Description The issue allows for Cross Site Scripting XSS in an XML script. Recommendations For Composr version 10.0.36, at the moment, there is no information about a newer version that contains a fix for this...

CVE-2021-30150: Improper Neutralization of Input During Web Page Generation

Composr 10.0.36 allows XSS in an XML script...

CVE-2021-27513

The module adminITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php files because it relies on "le filtre userside."...

CVE-2002-1534: Undefined Security Weakness

Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share...

CVE-2002-1534

Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share...