Skip to content
OpenAdvisories

Vendor

mtons

11 known vulnerabilities.

Products

6 results · Clear filters · Feed

  • Low 2.4

    mtons mblog update cross site scripting

    A vulnerability was detected in mtons mblog up to 3.5.0. This issue affects some unknown processing of the file /admin/options/update. The manipulation of the argument input results in cross site scripting. It is possible to launch the attack remotely. The ex…

  • Low 3.5

    mtons mblog Post submit cross site scripting

    A security vulnerability has been detected in mtons mblog up to 3.5.0. This vulnerability affects unknown code of the file /post/submit of the component Post Handler. The manipulation of the argument content/title/ leads to cross site scripting. It is possibl…

  • Low 3.5

    mtons mblog profile cross site scripting

    A flaw has been found in mtons mblog up to 3.5.0. Affected by this vulnerability is an unknown functionality of the file /settings/profile. Executing manipulation of the argument signature can lead to cross site scripting. The attack may be launched remotely.…

  • Low 3.7

    mtons mblog register information exposure

    A vulnerability was determined in mtons mblog up to 3.5.0. Affected is an unknown function of the file /register. The manipulation leads to information exposure through error message. It is possible to launch the attack remotely. The complexity of an attack i…

  • Low 3.7

    mtons mblog password excessive authentication

    A vulnerability was found in mtons mblog up to 3.5.0. This issue affects some unknown processing of the file /settings/password. The manipulation leads to improper restriction of excessive authentication attempts. The attack may be initiated remotely. The com…

  • Low 3.7

    mtons mblog Verification Code send_code excessive authentication

    A vulnerability was determined in mtons mblog up to 3.5.0. Affected by this issue is some unknown functionality of the file /email/send_code of the component Verification Code Handler. The manipulation of the argument email leads to improper restriction of ex…