CVE-2020-25538: Improper Control of Generation of Code

An authenticated attacker can inject malicious code into "lang" parameter in /uno/central.php file in CMSuno 1.6.2 and run this PHP code in the web page. In this way, attacker can takeover the control of the server...

PT-2020-16107

Name of the Vulnerable Software and Affected Versions CMSuno version 1.6.2 Description An authenticated attacker can inject malicious code into the lang parameter in the "/uno/central.php" file and run this PHP code in the web page, potentially allowing the attacker to take control of the server...

CVE-2020-5781

In IgniteNet HeliOS GLinq v2.2.1 r2961, the langSelection parameter is stored in the luci configuration file /etc/config/luci by the authenticator.htmlauth function. When modified with arbitrary javascript, this causes a denial-of-service condition for all other users...

Prototype Pollution

connie-lang is vulnerable to prototype pollution. The vulnerability exists as it does not restrict proto headers to be set in objects...

CVE-2020-7706

The package connie-lang before 0.1.1 are vulnerable to Prototype Pollution in the configuration language library used by connie...

CVE-2020-7706

The package connie-lang before 0.1.1 are vulnerable to Prototype Pollution in the configuration language library used by connie...

Code injection

The package connie-lang before 0.1.1 are vulnerable to Prototype Pollution in the configuration language library used by connie...

CVE-2020-7706

The package connie-lang before 0.1.1 are vulnerable to Prototype Pollution in the configuration language library used by connie...

CVE-2020-7706

The package connie-lang before 0.1.1 are vulnerable to Prototype Pollution in the configuration language library used by connie...

CVE-2020-7706

CVE-2020-7706: The connie-lang package before 0.1.1 is vulnerable to Prototype Pollution in its configuration language library. Affects connie-lang (node module) before 0.1.1. Root cause: prototype pollution in the library used by connie. Impact/summary: potential remote code execution or modific...

CVE-2020-7706: Improperly Controlled Modification of Object Prototype Attributes

The package connie-lang before 0.1.1 are vulnerable to Prototype Pollution in the configuration language library used by connie...

PT-2020-19729 · Connie Lang · Connie-Lang

Name of the Vulnerable Software and Affected Versions: connie-lang versions prior to 0.1.1 Description: The issue concerns Prototype Pollution in the configuration language library used by connie-lang. Recommendations: For versions prior to 0.1.1, update to version 0.1.1 or later to resolve the...

app-context-connie (>=0.0.1, <=1.1.0), app-context-connie-firebase (>=0.0.1, <=0.0.3) +1 more potentially affected by CVE-2020-7706 via connie-lang (>=0.0.1, <=0.1.0)

connie-lang NPM version =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.2.1 Source cves: CVE-2020-7706 Source advisory: SNYK:JS-CONNIELANG-598853...

PT-2020-9999

Name of the Vulnerable Software and Affected Versions: Blaauw Remote Kiln Control versions through v3.00r4 Description: The issue allows an unauthenticated attacker to access MySQL credentials in cleartext. The credentials can be found in files such as /engine/db.inc, /lang/nl.bak, or /lang/en.ba...

CVE-2020-6171

A cross-site scripting XSS vulnerability in the index page of the CLink Office 2.0 management console allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2020-6171

A cross-site scripting XSS vulnerability in the index page of the CLink Office 2.0 management console allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

Cross site scripting

A cross-site scripting XSS vulnerability in the index page of the CLink Office 2.0 management console allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2020-6171

A cross-site scripting XSS vulnerability in the index page of the CLink Office 2.0 management console allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2020-6171

CVE-2020-6171 : CLink Office 2.0 management console index page is vulnerable to Cross‑Site Scripting via the lang parameter. Remote attackers can inject arbitrary script/HTML, with impact including potential data theft or session hijacking as described in connected sources. The CVSS shows MEDIUM ...

CVE-2020-6171: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the index page of the CLink Office 2.0 management console allows remote attackers to inject arbitrary web script or HTML via the lang parameter...