PT-2021-10623

Name of the Vulnerable Software and Affected Versions: HongCMS version 3.0 Description: The issue concerns an arbitrary file read and write vulnerability. It is located in the component /admin/index.php/template/edit. Recommendations: For HongCMS version 3.0, consider restricting access to the...

PT-2021-22585

Name of the Vulnerable Software and Affected Versions: BIQS IT Biqs-drive versions 1.83 and below Description: A local file inclusion LFI issue exists when sending a specific payload as the file parameter to the "download/index.php" endpoint. This allows an attacker to read arbitrary files from t...

CVE-2021-39433: Undefined Security Weakness

A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user...

CVE-2020-21431: Undefined Security Weakness

HongCMS v3.0 contains an arbitrary file read and write vulnerability in the component /admin/index.php/template/edit...

CVE-2021-40923

Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the email parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the email parameter...

CVE-2021-40928

CVE-2021-40928 is an XSS vulnerability in the development version of FlexTV (index.php) exploitable via the PHP_SELF parameter. The issue arises from unsanitized input in index.php, enabling remote attackers to inject arbitrary web script or HTML. Impact details in the documents indicate a relati...

CVE-2021-40928

Cross-site scripting XSS vulnerability in index.php in FlexTV beta development version allows remote attackers to inject arbitrary web script or HTML via the PHPSELF parameter...

CVE-2021-40924

Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the firstname parameter...

CVE-2021-40924

Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the firstname parameter...

CVE-2021-40923

Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the email parameter...

CVE-2021-40923

The CVE-2021-40923 entry describes a Cross-site Scripting (XSS) vulnerability in the Bugs open-source defect tracking system, specifically install/index.php for Bugs 1.8 and earlier. The issue arises from the email parameter, allowing remote attackers to inject arbitrary web script or HTML. Conne...

CVE-2021-40922

Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the lastname parameter...

CVE-2021-40922

CVE-2021-40922 is a cross-site scripting (XSS) vulnerability affecting the open source defect-tracking system Bugs/Tinyissue in versions 1.8 and earlier, exploitable via the last_name parameter in install/index.php . The root cause is improper input handling in that endpoint, enabling remote atta...

CVE-2021-40922

Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the lastname parameter...

CVE-2021-40922: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the lastname parameter...

CVE-2021-40924: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the firstname parameter...

PT-2021-23016

Name of the Vulnerable Software and Affected Versions FlexTV beta development version Description The issue is related to a cross-site scripting XSS vulnerability in the index.php file of FlexTV. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the PHP SELF...

CVE-2021-40923: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the email parameter...

PT-2021-23011

Name of the Vulnerable Software and Affected Versions bugs versions 1.8 and below Description The issue allows remote attackers to inject arbitrary web script or HTML via the email parameter in the install/index.php file. This enables attackers to perform cross-site scripting XSS attacks...