| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-15603 | 4.3 | An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen. | 2018-10-19 17:34:00 | 2018-08-21 02:29:00 |
| CVE-2018-1000225 | 4.3 | Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Cross Site Scripting (XSS) vulnerability in cobbler-web that can result in Priv | 2018-10-19 17:33:00 | 2018-08-20 20:29:00 |
| CVE-2006-0861 | 5.0 | Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to obtain the source IP addresses of guestbook entries via a direct request to /gb/gblog. | 2018-10-19 17:29:00 | 2006-02-23 23:02:00 |
| CVE-2018-1000642 | 4.3 | FlightAirMap version <=v1.0-beta.21 contains a Cross Site Scripting (XSS) vulnerability in GET variable used within registration sub menu page that can result in unauthorised actions and access to data, stealing session information. This vulnerabilit | 2018-10-19 17:26:00 | 2018-08-20 19:31:00 |
| CVE-2018-1000640 | 4.3 | OpenCart-Overclocked version <=1.11.1 contains a Cross Site Scripting (XSS) vulnerability in User input entered unsanitised within JS function in the template that can result in Unauthorised actions and access to data, stealing session information, d | 2018-10-19 17:21:00 | 2018-08-20 19:31:00 |
| CVE-2018-15570 | 3.5 | In waimai Super Cms 20150505, there is stored XSS via the /admin.php/Foodcat/editsave fcname parameter. | 2018-10-19 17:18:00 | 2018-08-20 01:29:00 |
| CVE-2018-15567 | 4.3 | CMSUno before 1.5.3 has XSS via the title field. | 2018-10-19 17:04:00 | 2018-08-20 01:29:00 |
| CVE-2018-16237 | 4.0 | An issue was discovered in damiCMS V6.0.1. There is Directory Traversal via '|' characters in the s parameter to admin.php, as demonstrated by an admin.php?s=Tpl/Add/id/c:|windows|win.ini URI. | 2018-10-19 16:30:00 | 2018-08-30 22:29:00 |
| CVE-2018-16238 | 6.5 | An issue was discovered in damiCMS V6.0.1. Remote code execution can occur via PHP code in a multipart/form-data POST to the admin.php?s=/Tpl/Update.html URI. For example, this can update the Web/Tpl/default/head.html file. | 2018-10-19 16:26:00 | 2018-08-30 22:29:00 |
| CVE-2016-6854 | 4.3 | An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code which got injected to a mail with inline PGP signature gets executed when verifying the signature. Malicious script code can be executed within a user's context. This can | 2018-10-19 15:46:00 | 2016-12-15 06:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: