autolink. Such manipulation leads to cross site scripting.This vulnerability is referenced as CVE-2016-7149. It is possible to launch the attack remotely. No exploit is available.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2016-7149 | b2evolution up to 6.7.5 autolink cross site scripting (BID-92967 / ID 802129)
A vulnerability, which was classified as problematic, was found in b2evolution up to 6.7.5. This affects the function autolink. Such manipulation leads to…
A vulnerability, which was classified as problematic, was found in b2evolution up to 6.7.5. This affects the function
This vulnerability is referenced as CVE-2016-7149. It is possible to launch the attack remotely. No exploit is available.
This vulnerability is referenced as CVE-2016-7149. It is possible to launch the attack remotely. No exploit is available.
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
Advisory Radar
In herstellerseitiger Prüfung
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller-Advisory noch nicht formal hinterlegt. Regelmäßiges Re-Scanning der CTI-Quellen anberaumt.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Web Referencewww.openwall.com
-
Web Referencewww.securityfocus.com
-
Web Referencewww.openwall.com
-
Upstream-Referenz (Code-Hosting, kein Advisory)github.com