CVE-2020-14752

Vulnerability in the Hyperion Lifecycle Management product of Oracle Hyperion component: Shared Services. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Lifecycle Management...

CVE-2019-14752

SuiteCRM 7.10.x and 7.11.x before 7.10.20 and 7.11.8 has XSS...

Atlassian Jira Service Management Data Center and Server < 4.20.27 / 5.4.x < 5.4.11 (JSDSERVER-14752)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-14752 advisory. - In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a...

CVE-2020-14752

CVE-2020-14752 affects Oracle Hyperion Lifecycle Management (Shared Services) 11.1.2.4. The vulnerability is exploitable over HTTP with network access by a high-privilege attacker and requires user interaction; successful exploitation could lead to unauthorized creation, deletion or modification ...

CVE-2019-14752

CVE-2019-14752 affects SuiteCRM 7.10.x and 7.11.x prior to 7.10.20 and 7.11.8, with a Cross-Site Scripting (XSS) vulnerability. The provided sources indicate the affected versions and the fixed versions (7.10.20 and 7.11.8). The exact vulnerable component/condition is not detailed in the supplied...

CVE-2017-14752

Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 before 16.10.6, and 17.04 before 17.04.4 are vulnerable to a user submitting a potential dangerous payload, e.g., XSS code, to be saved as their first name, last name, or display name in the profile fields that can cause issues such as...

CVE-2017-14752

Mahara is affected in multiple tracked versions (15.04 before 15.04.15; 16.04 before 16.04.9; 16.10 before 16.10.6; 17.04 before 17.04.4). The vulnerability allows a user to submit a dangerous payload (for example, XSS) in profile fields (first name, last name, display name) that is saved and can...

guppyTraverse.txt

BID 14752 is not only an XSS vulnerability, the real problem is a directory transversal flaw and affects Guppy versions less than 4.5.6a. PoC works for versions alertXSS" you receive an error that PHP can't include the file and the javascript gets executed. This assumes registerglobals and...