Design/Logic Flaw

Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page...

CVE-2018-13252

Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page...

CVE-2018-13252

Entrust Datacard Syntera CS 5.x is affected by a Cross-Site Scripting (XSS) vulnerability in the login page, exploitable via the name field of the omain or Computer Name field. The Connected CNVD entry confirms a 5.x version impact and remote code execution is described as possible through the ...

cs.montana.edu Improper Access Control vulnerability

Open Bug Bounty ID: OBB-637248 Description| Value ---|--- Affected Website:| cs.montana.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

cs.qwertygame.com XSS vulnerability

Open Bug Bounty ID: OBB-633167 Description| Value ---|--- Affected Website:| cs.qwertygame.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-8838

A weakness in access controls in CENTUM CS 1000 all versions, CENTUM CS 3000 versions R3.09.50 and earlier, CENTUM CS 3000 Small versions R3.09.50 and earlier, CENTUM VP versions R6.03.10 and earlier, CENTUM VP Small versions R6.03.10 and earlier, CENTUM VP Basic versions R6.03.10 and earlier,...

CVE-2018-8838

A weakness in access controls in CENTUM CS 1000 all versions, CENTUM CS 3000 versions R3.09.50 and earlier, CENTUM CS 3000 Small versions R3.09.50 and earlier, CENTUM VP versions R6.03.10 and earlier, CENTUM VP Small versions R6.03.10 and earlier, CENTUM VP Basic versions R6.03.10 and earlier,...

CVE-2018-8838

A weakness in access controls in CENTUM CS 1000 all versions, CENTUM CS 3000 versions R3.09.50 and earlier, CENTUM CS 3000 Small versions R3.09.50 and earlier, CENTUM VP versions R6.03.10 and earlier, CENTUM VP Small versions R6.03.10 and earlier, CENTUM VP Basic versions R6.03.10 and earlier,...

CVE-2018-8838

The CVE-2018-8838 issue is a local-privilege vulnerability in Yokogawa CENTUM and Exaopc components (CENTUM CS 1000; CENTUM CS 3000/Small; CENTUM VP family; Exaopc; B/M9000 CS/VP) where inadequate access controls on the message management function may enable a local attacker to manipulate alarms ...

Yokogawa CENTUM and Exaopc Elevation of Privilege Vulnerability

CENTUM CS 3000 and CENTUM VP are Yokogawa motor products that are Windows-based control systems. These products are used in multiple industries, including critical manufacturing, energy, food and agriculture. An elevation of privilege vulnerability exists in Yokogawa CENTUM and Exaopc, which can ...

CVE-2018-8977

In Exiv2 0.26, the Exiv2::Internal::printCsLensFFFF function in canonmnint.cpp allows remote attackers to cause a denial of service invalid memory access via a crafted file...

doctoraspa-cs.com XSS vulnerability

Open Bug Bounty ID: OBB-587837 Description| Value ---|--- Affected Website:| doctoraspa-cs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

facenbody-cs.com XSS vulnerability

Open Bug Bounty ID: OBB-588076 Description| Value ---|--- Affected Website:| facenbody-cs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cs.princeton.edu XSS vulnerability

Open Bug Bounty ID: OBB-584500 Description| Value ---|--- Affected Website:| cs.princeton.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cs.sbs.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-466439 Description| Value ---|--- Affected Website:| cs.sbs.co.kr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

cs-preis.de XSS vulnerability

Open Bug Bounty ID: OBB-455645 Description| Value ---|--- Affected Website:| cs-preis.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

CVE-2017-15673

The files function in the administration section in CS-Cart 4.6.2 and earlier allows attackers to execute arbitrary PHP code via vectors involving a custom page...

Code injection

The files function in the administration section in CS-Cart 4.6.2 and earlier allows attackers to execute arbitrary PHP code via vectors involving a custom page...

CVE-2017-15673

CVE-2017-15673 affects CS-Cart 4.6.2 and earlier. The vulnerability resides in the administration section’s files function, allowing an attacker to upload or craft a custom page that executes arbitrary PHP code, yielding remote code execution on the server. Multiple connected sources corroborate ...

CVE-2017-15673

The files function in the administration section in CS-Cart 4.6.2 and earlier allows attackers to execute arbitrary PHP code via vectors involving a custom page...