Cross site scripting

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=systeminfo/contactinfo. The manipulation of the textbox Telephone with the input alert1 leads to cross site scripting. The attack may be initiated...

CVE-2022-1980

CVE-2022-1980 affects SourceCodester Product Show Room Site 1.0. The vulnerability is a stored cross-site scripting (XSS) in the /admin/?page=system_info/contact_info Telephone input, where injecting is reflected in the application. The issue requires authentication to exploit and can be trigger...

CVE-2022-1979 SourceCodester Product Show Room Site p=contact cross site scripting

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulnerability affects p=contact. The manipulation of the Message textbox with the input alert1 leads to cross site scripting. The attack can be initiated remotely but requires...

CVE-2022-1979

SourceCodester Product Show Room Site 1.0 is affected by a stored XSS in the p=contact Message textbox. The vulnerability allows injection of and can be triggered remotely, but the initial descriptions state authentication is required. Exploit details have been disclosed publicly. The connected ...

CVE-2022-1979: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulnerability affects p=contact. The manipulation of the Message textbox with the input leads to cross site scripting. The attack can be initiated remotely but requires authentication...

CVE-2022-1980: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=systeminfo/contactinfo. The manipulation of the textbox Telephone with the input leads to cross site scripting. The attack may be initiated remotely b...

Product Show Room Site 1.0 Cross Site Scripting Vulnerability

Product Show Room Site - 'Telephone' Stored Cross-Site ScriptingXSS Exploit Title: Product Show Room Site - 'Telephone' Stored Cross-Site ScriptingXSS Exploit Author: email protected inc Vendor Homepage: https://www.sourcecodester.com/php/15370/product-show-room-site-phpoop-free-source-code.html...

Product Show Room Site 安全漏洞

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to cross-site scripting, which stems from using a special string input text box that leads to cross-site scripting. No details of the vulnerability are...

PT-2022-14231

Name of the Vulnerable Software and Affected Versions SourceCodester Product Show Room Site version 1.0 Description A vulnerability was found in the software, declared as problematic. It affects the p=contact parameter. The manipulation of the Message textbox with the input alert1 leads to...

PT-2022-14232

Name of the Vulnerable Software and Affected Versions SourceCodester Product Show Room Site version 1.0 Description A problematic issue has been identified, affecting the "/admin/?page=system info/contact info" endpoint. The manipulation of the Telephone textbox with the input alert1 leads to...

Product Show Room Site 1.0 Cross Site Scripting

Product Show Room Site - 'Telephone' Stored Cross-Site ScriptingXSS Exploit Title: Product Show Room Site - 'Telephone' Stored Cross-Site ScriptingXSS Exploit Author: [email protected] inc Vendor Homepage:...

gunshowbooks.com Cross Site Scripting vulnerability OBB-2627521

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-3G8J-JJ54-3VJG Apache Struts is vulnerable to Cross-site Scripting

Multiple cross-site scripting XSS vulnerabilities in Apache Struts 2.3.15.3 allow remote attackers to inject arbitrary web script or HTML via the namespace parameter to 1 actionNames.action and 2 showConfig.action in config-browser/...

CVE-2021-42165

MitraStar GPT-2541GNAC-N1 HGU 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing command "deviceinfo show file &&/bin/bash" because of incorrect sanitization of parameter "path"...

Mitrastar GPT-2541GNAC-N1 操作系统命令注入漏洞

The Mitrastar GPT-2541GNAC-N1 is a router. An operating system command injection vulnerability exists in the firmware version of the Mitrastar GPT-2541GNAC-N1 HGU 100VNZ0b33, which is caused by incorrectly clearing the parameter "path". The vulnerability can be exploited by a remote authenticatio...

catherinebradfordshow.com Cross Site Scripting vulnerability OBB-2581754

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2025-8453

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0-rc1 79 Description A vulnerability in the Linux kernel has been resolved. The issue occurs when a compat process tries to execute an unknown system call above the ARM NR COMPAT END number, causing the kern...

GHSA-RJVG-8V36-XV9R element-plus vulnerable to cross-site scripting (XSS) via el-table-column

element-plus below 2.0.5 is vulnerable to Cross Site Scripting XSS when attribute show-tooltips-overflow of el-table-column is true. The mouseover action will make the text of this column render as html...

PT-2022-18221

Name of the Vulnerable Software and Affected Versions element-plus versions prior to 2.0.5 Description The issue concerns Cross Site Scripting XSS via the el-table-column component. Specifically, when the show-tooltips-overflow attribute of el-table-column is set to true, a mouseover action can...

PT-2022-29317

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to a refcount leak in the format show function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...