13454 matches found
PT-2022-11853
Name of the Vulnerable Software and Affected Versions Hoosk version 1.8.0 Description A vulnerability exists due to a failure to check if config.php already exists in the root directory, which could let a malicious user reinstall the website. This issue is related to the /install/index.php...
CVE-2022-1191: Server-Side Request Forgery (SSRF)
SSRF on index.php/cobrowse/proxycss/ in GitHub repository livehelperchat/livehelperchat prior to 3.96...
CVE-2021-42867: Improper Neutralization of Input During Web Page Generation
A Cross Site Scripting XSS vulnerability exists in DanPros htmly 2.8.1 via the Description field in 1 admin/config, and 2 index.php pages...
PT-2022-11719
Name of the Vulnerable Software and Affected Versions DanPros htmly version 2.8.1 Description A Cross Site Scripting XSS issue exists via the Description field in the "admin/config" and "index.php" pages. Recommendations For DanPros htmly version 2.8.1, consider restricting access to the...
Cross-Site Scripting (XSS)
nilsteampassnet/teampass is vulnerable to reflected cross-site scripting. The vulnerability exists in index.php due to improper sanitization which allows an attacker to inject and execute arbitrary scripts...
CVE-2021-45866
A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php...
CVE-2021-45866
A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php...
Cross site scripting
A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php...
CVE-2021-45866
A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php...
Cross-site Scripting in teampass
Teampass 2.1.26 allows reflected XSS via the index.php PATHINFO. Someone must open a link for the Teampass Password Manager index page containing malicious payload...
GHSA-M2WV-M5PF-284R Cross-site Scripting in teampass
Teampass 2.1.26 allows reflected XSS via the index.php PATHINFO. Someone must open a link for the Teampass Password Manager index page containing malicious payload...
CVE-2021-45866: Improper Neutralization of Input During Web Page Generation
A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php...
PT-2022-12445
Name of the Vulnerable Software and Affected Versions Sourcecodester Student Attendance Management System version 1.0 Description A Stored Cross Site Scripting XSS issue exists via the couse field in the "index.php" endpoint. This allows for malicious script execution. Recommendations For...
PT-2022-11978
Name of the Vulnerable Software and Affected Versions textpattern version 4.8.7 Description The issue allows a remote and unauthenticated attacker to trigger remote code execution by uploading a webshell via Cross Site Scripting XSS in the "/textpattern/index.php" endpoint, specifically in the Bo...
CVE-2021-44082: Improper Neutralization of Input During Web Page Generation
textpattern 4.8.7 is vulnerable to Cross Site Scripting XSS via /textpattern/index.php,Body. A remote and unauthenticated attacker can use XSS to trigger remote code execution by uploading a webshell. To do so they must first steal the CSRF token before submitting a file upload request...
CVE-2022-26980
Teampass 2.1.26 allows reflected XSS via the index.php PATHINFO...
CVE-2022-26980
Teampass 2.1.26 allows reflected XSS via the index.php PATHINFO...
CVE-2022-26980
Teampass 2.1.26 allows reflected XSS via the index.php PATHINFO...
CVE-2022-26980
CVE-2022-26980 affects Teampass 2.1.26 and is described as a reflected XSS vulnerability via the index.php PATH_INFO. The linked sources corroborate a reflected XSS issue but do not provide an official patch version or remediation in the supplied documents. Documented CVSS scores from NVD (2.0/3....