CVE-2019-16683

Mô tả

Tham khảo

• blog.nirajkhatiwada.com.np/cve-2019-16683-stored-cross-site-scripting · Exploit
• XOOPS/XoopsCore25 · Patch
• xoops.org/modules/publisher · Vendor Advisory

Lỗ hổng khác của xoops

• CVE-2023-36217NGHIÊM TRỌNG 9.0Cross Site Scripting vulnerability in Xoops CMS v.2.5.10 allows a remote attacker to execute arbitrary code via the category name field of t…
• CVE-2019-16684TRUNG BÌNH 4.8An issue was discovered in the image-manager in Xoops 2.5.10. When any image with a JavaScript payload as its name is hovered over in the li…
• CVE-2017-12139TRUNG BÌNH 6.1XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php.
• CVE-2017-12138TRUNG BÌNH 6.1XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter.
• CVE-2017-11174NGHIÊM TRỌNG 9.8In install/page_dbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed to CREATE and ALTER SQL queries caused SQL …