21 matches found
CVE-2025-13271
A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...
CVE-2025-13271
creationtimestamp| type| source ---|---|--- 2025-11-17 11:03:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5t3aoh6d52k...
CVE-2020-13271
A Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code in the blobs API in all previous GitLab CE/EE versions through 13.0.1...
CVE-2019-13271
Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. They forward ARP requests, which are sent as broadcast packets, between the host and the guest networks. To use this leakage as a direct covert...
CVE-2024-13271
Incorrect Authorization vulnerability in Drupal Content Entity Clone allows Forceful Browsing.This issue affects Content Entity Clone: from 0.0.0 before 1.0.4...
CVE-2024-13271 Content Entity Clone - Moderately critical - Information Disclosure - SA-CONTRIB-2024-035
Incorrect Authorization vulnerability in Drupal Content Entity Clone allows Forceful Browsing.This issue affects Content Entity Clone: from 0.0.0 before 1.0.4...
CVE-2024-13271 Content Entity Clone - Moderately critical - Information Disclosure - SA-CONTRIB-2024-035
Incorrect Authorization vulnerability in Drupal Content Entity Clone allows Forceful Browsing.This issue affects Content Entity Clone: from 0.0.0 before 1.0.4...
CVE-2024-13271
The vulnerability CVE-2024-13271 affects Drupal’s Content Entity Clone module. The issue is incorrect authorization that allows forceful browsing and potential disclosure of protected information. Affected versions are 0.0.0 through 1.0.4 of the Content Entity Clone module. Remediation per the co...
CVE-2024-13271 Content Entity Clone - Moderately critical - Information Disclosure - SA-CONTRIB-2024-035
Incorrect Authorization vulnerability in Drupal Content Entity Clone allows Forceful Browsing.This issue affects Content Entity Clone: from 0.0.0 before 1.0.4...
CVE-2021-34863
CVE-2021-34863 affects D-Link DAP-2020 1.01rc001 routers. A stack-based buffer overflow occurs in the webproc endpoint when processing the var:page parameter due to insufficient validation of input length, enabling network-adjacent attackers to execute code with root privileges. Documented by ZDI...
CVE-2020-13271
A Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code in the blobs API in all previous GitLab CE/EE versions through 13.0.1...
CVE-2020-13271
A Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code in the blobs API in all previous GitLab CE/EE versions through 13.0.1...
CVE-2020-13271
A Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code in the blobs API in all previous GitLab CE/EE versions through 13.0.1...
CVE-2020-13271
CVE-2020-13271 is a stored XSS in the GitLab blobs API affecting all prior GitLab CE/EE versions up to 13.0.1. The connected sources consistently describe a cross-site scripting vulnerability that could execute arbitrary JavaScript in the vulnerable API. The documents do not specify a patched ver...
CVE-2020-13271
Removed by vendor...
CVE-2020-13271
A Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code in the blobs API in all previous GitLab CE/EE versions through 13.0.1...
CVE-2019-13271
CVE-2019-13271 affects the Edimax BR-6208AC V1 router, where insufficient isolation between host and guest networks on the same device allows ARP traffic to be forwarded across the two networks. The result is a potential cross-router covert channel: an attacker can issue an ARP request to an arbi...
Stored cross-site scripting vulnerability in JYmusic frontend (CNVD-2019-13271)
JYmusic is an open source cross-platform music management system. JYmusic frontend has a stored cross-site scripting vulnerability, an attacker can insert malicious js code in the page to obtain user cookies and other information, resulting in user hijacking...