323 matches found
CVE-2023-3860: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in phpscriptpoint Insurance 1.2. It has been classified as problematic. Affected is an unknown function of the file /page.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-235212...
PT-2023-26526 · Unknown · Phpscriptpoint Insurance
Name of the Vulnerable Software and Affected Versions: phpscriptpoint Insurance version 1.2 Description: A vulnerability was found in the software, classified as problematic. It affects an unknown function of the file /page.php, leading to cross site scripting. The manipulation can be launched...
CVE-2023-3853
A vulnerability was found in phpscriptpoint BloodBank 1.1. It has been rated as problematic. This issue affects some unknown processing of the file page.php. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-235205 was assigned to this...
Cross site scripting
A vulnerability was found in phpscriptpoint BloodBank 1.1. It has been rated as problematic. This issue affects some unknown processing of the file page.php. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-235205 was assigned to this...
CVE-2023-3853 phpscriptpoint BloodBank page.php cross site scripting
A vulnerability was found in phpscriptpoint BloodBank 1.1. It has been rated as problematic. This issue affects some unknown processing of the file page.php. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-235205 was assigned to this...
CVE-2023-3853: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in phpscriptpoint BloodBank 1.1. It has been rated as problematic. This issue affects some unknown processing of the file page.php. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-235205 was assigned to this...
PT-2023-26500 · Unknown · Phpscriptpoint Bloodbank
Name of the Vulnerable Software and Affected Versions: phpscriptpoint BloodBank version 1.1 Description: A problem was found in the processing of the file page.php, which can lead to cross site scripting. The attack may be initiated remotely. The vendor was contacted about this issue but did not...
CVE-2022-4633: Cross-Site Request Forgery (CSRF)
A vulnerability was found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file src/setting-page.php of the component Settings Handler. The manipulation leads to cross-site request forgery. The attack may be launched...
CVE-2022-4633
A vulnerability was found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file src/setting-page.php of the component Settings Handler. The manipulation leads to cross-site request forgery. The attack may be launched...
CVE-2022-4633 Auto Upload Images Settings setting-page.php cross-site request forgery
A vulnerability was found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file src/setting-page.php of the component Settings Handler. The manipulation leads to cross-site request forgery. The attack may be launched...
CVE-2022-43321
Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting XSS vulnerability in the component /common/library/Page.php...
CVE-2022-43321
Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting XSS vulnerability in the component /common/library/Page.php...
CVE-2022-43321
Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting XSS vulnerability in the component /common/library/Page.php...
CVE-2022-43321: Improper Neutralization of Input During Web Page Generation
Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting XSS vulnerability in the component /common/library/Page.php...
ShopWind 跨站脚本漏洞
ShopWind is a Chinese ShopWind company based on the Yii2.0 framework of the depth of the reconstruction of the B2B2C, O2O industry e-commerce system software. A cross-site scripting vulnerability exists in ShopWind v3.4.3, which stems from the lack of effective filtering and escaping of...
CVE-2022-43321
Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting XSS vulnerability in the component /common/library/Page.php...
CVE-2022-43321
Shopwind v3.4.3 has a reflected cross-site scripting (XSS) vulnerability in /common/library/Page.php. Root cause: lack of proper input filtering/escaping. CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (base 6.1, MEDIUM). Impact is limited to confidentiality and integrity (LOW) with user ...
PT-2022-26847 · Shopwind · Shopwind
Name of the Vulnerable Software and Affected Versions: Shopwind version 3.4.3 Description: The issue is related to a reflected cross-site scripting XSS vulnerability. This vulnerability was found in the /common/library/Page.php component. Recommendations: For Shopwind version 3.4.3, consider...
PT-2022-20325
Name of the Vulnerable Software and Affected Versions elitecms version 1.01 Description The issue concerns SQL Injection via the "/admin/edit page.php?page=" endpoint. This allows for potential manipulation of database queries. No information is provided about the estimated number of affected...