Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2018-5690

Disclosure Date: January 14, 2018 (last updated November 26, 2024)
Cross-site scripting (XSS) vulnerability in admin/users.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the nb parameter (aka the page limit number).
0
0
Attacker Value
Unknown

CVE-2018-5689

Disclosure Date: January 14, 2018 (last updated November 26, 2024)
Cross-site scripting (XSS) vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the malicious user's email.
0
0