Rezultati pretraživanja za 'Proizvođač: yootheme'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-16669 | 5.0 | The Reset Password feature in Pagekit 1.0.17 gives a different response depending on whether the e-mail address of a valid user account is entered, which might make it easier for attackers to enumerate accounts. | 2019-09-23 19:15:00 | 2019-09-21 19:15:00 |
| CVE-2018-14381 | 5.8 | Pagekit before 1.0.14 has a /user/login?redirect= open redirect vulnerability. | 2018-09-14 19:41:00 | 2018-07-18 15:29:00 |
| CVE-2018-11564 | 3.5 | Stored XSS in YOOtheme Pagekit 1.0.13 and earlier allows a user to upload malicious code via the picture upload feature. A user with elevated privileges could upload a photo to the system in an SVG format. This file will be uploaded to the system and | 2018-07-05 17:02:00 | 2018-06-02 01:29:00 |
| CVE-2014-8070 | 6.8 | Open redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to index.php/user/logout. | 2014-10-21 18:07:00 | 2014-10-14 14:55:00 |
| CVE-2014-8069 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in YOOtheme Pagekit CMS 0.8.7 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP Referer header to index.php/user or (2) PATH_INFO to index.php. | 2014-10-21 18:00:00 | 2014-10-14 14:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/2
Zapisa po stranici: