Global
Xibo CMS SQL injection, cross-site scripting and CSRF flaws disclosed
NVD published 3 vulnerabilities in Xibo CMS, covering SQL injection, cross-site scripting and CSRF. SQL injection vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to execute arbitrary SQL commands via the displayid parameter.
- Type
- Vulnerability
- Sector
- Vendor
- Country
- Global
