Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2017-16514

Disclosure Date: January 10, 2018 (last updated November 26, 2024)
Multiple persistent stored Cross-Site-Scripting (XSS) vulnerabilities in the files /wb/admin/admintools/tool.php (Droplet Description) and /install/index.php (Site Title) in WebsiteBaker 2.10.0 allow attackers to insert persistent JavaScript code that gets reflected back to users in multiple areas in the application.
0
0
Attacker Value
Unknown

CVE-2017-9771

Disclosure Date: June 21, 2017 (last updated November 26, 2024)
install\save.php in WebsiteBaker v2.10.0 allows remote attackers to execute arbitrary PHP code via the database_username, database_host, or database_password parameter.
0
0
Attacker Value
Unknown

CVE-2017-9360

Disclosure Date: June 02, 2017 (last updated November 26, 2024)
WebsiteBaker v2.10.0 has a SQL injection vulnerability in /account/details.php.
0
0
Attacker Value
Unknown

CVE-2017-9361

Disclosure Date: June 02, 2017 (last updated November 26, 2024)
WebsiteBaker v2.10.0 has a stored XSS vulnerability in /account/details.php.
0
0