Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2020-36637: Merge pull request #7 from lacaulac/patch-2 · Chris92de/AdminServ@3ed17da

A vulnerability was found in Chris92de AdminServ. It has been declared as problematic. This vulnerability affects unknown code of the file resources/core/adminserv.php. The manipulation of the argument text leads to cross site scripting. The attack can be initiated remotely. The name of the patch is 3ed17dab3b4d6e8bf1c82ddfbf882314365e9cd7. It is recommended to apply a patch to fix this issue. VDB-217042 is the identifier assigned to this vulnerability.

CVE
Open in Source
#xss#vulnerability#git#php

Skip to content

    • Actions

      Automate any workflow

    • Packages

      Host and manage packages

    • Security

      Find and fix vulnerabilities

    • Codespaces

      Instant dev environments

    • Copilot

      Write better code with AI

    • Code review

      Manage code changes

    • Issues

      Plan and track work

    • Discussions

      Collaborate outside of code

*   Explore
*   All features
*   Documentation
*   GitHub Skills
*   Blog

    • For

    • Enterprise

    • Teams

    • Startups

    • Education

    • By Solution

    • CI/CD & Automation

    • DevOps

    • DevSecOps

    • Case Studies

    • Customer Stories

    • Resources

    • GitHub Sponsors

      Fund open source developers

*   The ReadME Project
    
    GitHub community articles
    

*   Repositories
*   Topics
*   Trending
*   Collections
  • Pricing

This repository has been archived by the owner before Nov 9, 2022. It is now read-only.

  • Notifications

  • Fork 8

  • Code

  • Issues 2

  • Pull requests 1

  • Actions

  • Projects

  • Wiki

  • Security

  • Insights

Permalink

Browse files

Merge pull request #7 from lacaulac/patch-2

Fixed an XSS vulnerability

  • Loading branch information

2 parents 9a45087 + 6a61568 commit 3ed17dab3b4d6e8bf1c82ddfbf882314365e9cd7

Showing 1 changed file with 1 addition and 1 deletion.

@@ -72,7 +72,7 @@ public static function error($text = null){

$_SESSION[‘error’] = $text;

}

public static function info($text){

$_SESSION[‘info’] = $text;

$_SESSION[‘info’] = htmlspecialchars($text, ENT_QUOTES, ‘UTF-8’);

}

0 comments on commit 3ed17da

Please sign in to comment.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE