7 matches found
CVE-2022-34550
Sims v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /addNotifyServlet. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the notifyInfo parameter...
CVE-2022-34550
Sims v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /addNotifyServlet. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the notifyInfo parameter...
CVE-2022-34550
Sims v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /addNotifyServlet. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the notifyInfo parameter...
CVE-2022-34550
The CVE-2022-34550 issue affects Sims v1.0, where a cross-site scripting (XSS) vulnerability exists in the/addNotifyServlet. It allows an attacker to inject arbitrary web scripts/HTML via the notifyInfo parameter, enabling user-facing script execution. The NVD entry lists CVSS v3.1 base metrics (...
Sims cross-site scripting vulnerabilities
Sims is a student information management system by the Chinese individual developer RawChen. A security vulnerability exists in Sims v1.0, which originates from a cross-site scripting XSS vulnerability discovered via the component /addNotifyServlet. An attacker can exploit this vulnerability to...
PT-2022-22201
Name of the Vulnerable Software and Affected Versions Sims version 1.0 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the notifyInfo parameter in the "/addNotifyServlet" API endpoint. This enables the execution of malicious code...
CVE-2022-34550: Improper Neutralization of Input During Web Page Generation
Sims v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /addNotifyServlet. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the notifyInfo parameter...