Show filters
11 Total Results
Displaying 1-10 of 11
Sort by:
Attacker Value
Unknown
CVE-2022-45004
Disclosure Date: March 22, 2023 (last updated October 08, 2023)
Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page.
0
Attacker Value
Unknown
CVE-2022-45003
Disclosure Date: March 22, 2023 (last updated October 08, 2023)
Gophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted payload involving autofocus.
0
Attacker Value
Unknown
CVE-2022-25295
Disclosure Date: September 11, 2022 (last updated October 08, 2023)
This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parse(r.FormValue("next")) to extract path and eventually redirect user to a relative URL, but if next parameter starts with multiple backslashes like \\\\\\example.com, browser will redirect user to http://example.com.
0
Attacker Value
Unknown
CVE-2020-24711
Disclosure Date: October 28, 2020 (last updated February 22, 2025)
The Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers to cause a denial of service via a clickjacking attack
0
Attacker Value
Unknown
CVE-2020-24708
Disclosure Date: October 28, 2020 (last updated February 22, 2025)
Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the Host field on the send profile form.
0
Attacker Value
Unknown
CVE-2020-24712
Disclosure Date: October 28, 2020 (last updated February 22, 2025)
Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page.
0
Attacker Value
Unknown
CVE-2020-24709
Disclosure Date: October 28, 2020 (last updated February 22, 2025)
Cross Site Scripting (XSS) vulnerability in Gophish through 0.10.1 via a crafted landing page or email template.
0
Attacker Value
Unknown
CVE-2020-24713
Disclosure Date: October 28, 2020 (last updated February 22, 2025)
Gophish through 0.10.1 does not invalidate the gophish cookie upon logout.
0
Attacker Value
Unknown
CVE-2020-24707
Disclosure Date: October 28, 2020 (last updated February 22, 2025)
Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content.
0
Attacker Value
Unknown
CVE-2020-24710
Disclosure Date: October 28, 2020 (last updated February 22, 2025)
Gophish before 0.11.0 allows SSRF attacks.
0
