Lucene search
+L

6 matches found

Positive Technologies
Positive Technologies
•added 2025/01/12 12:00 a.m.•20 views

PT-2025-3868 · Unknown · Reckon Sppanadmin

Name of the Vulnerable Software and Affected Versions: reckcn SPPanAdmin version 1.0 Description: A cross-site scripting issue was found in the software, allowing for remote exploitation. The manipulation of the name argument in the "/;/admin/role/edit" file leads to this issue. Other parameters...

5.3CVSS4.3AI score0.00411EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/12 12:00 a.m.•1 views

CVE-2025-0397: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in reckcn SPPanAdmin 1.0. Affected is an unknown function of the file /;/admin/role/edit. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclos...

5.3CVSS4AI score0.00411EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/09/26 12:00 a.m.•12 views

springboot_authority cross-site scripting vulnerability

springbootauthority is a backend management system. The system includes modules for user management, role management, and resource connection management. A cross-site scripting vulnerability exists in the admin/role/edit page in springbootauthority 2017-03-06 and earlier versions, which can be...

4.8CVSS4.9AI score0.00534EPSS
SaveExploits1References1
Prion
Prion
•added 2018/09/23 10:29 p.m.•24 views

Cross site scripting

An issue was discovered in springbootauthority through 2017-03-06. There is stored XSS via the admin/role/edit roleKey, name, or description parameter...

3.5CVSS4.8AI score0.00534EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2018/09/23 10:29 p.m.•13 views

CVE-2018-17369

An issue was discovered in springbootauthority through 2017-03-06. There is stored XSS via the admin/role/edit roleKey, name, or description parameter...

4.8CVSS5.8AI score0.00534EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/23 12:00 a.m.•4 views

CVE-2018-17369: Improper Neutralization of Input During Web Page Generation

An issue was discovered in springbootauthority through 2017-03-06. There is stored XSS via the admin/role/edit roleKey, name, or description parameter...

4.8CVSS5.6AI score0.00534EPSS
SaveExploits1References2
Rows per page
Query Builder