CVE-2020-20672

KiteCMS v1.1 contains an arbitrary file upload vulnerability in /admin/upload/uploadfile that allows an attacker to getshell by uploading a crafted PHP file. Multiple sources (NVD/CVE, CNVD, Red Hat advisories, OSV, CVE lists) corroborate the flaw as an arbitrary file upload in KiteCMS with impac...

CVE-2021-20672

Reflected cross-site scripting vulnerability due to insufficient verification of URL query parameters in GROWI v4.2 Series versions from v4.2.0 to v4.2.7 allows remote attackers to inject an arbitrary script via unspecified vectors...

CVE-2021-20672

The CVE-2021-20672 entry applies to GROWI (WESEEK) versions in the 4.2.x series, specifically 4.2.0–4.2.7. The underlying issue is insufficient verification/validation of URL query parameters, causing a reflected cross-site scripting (XSS) vulnerability. Attackers can inject arbitrary scripts tha...

JVN#86438134: Multiple cross-site scripting vulnerabilities in GROWI

GROWI provided by WESEEK, Inc. contains multiple cross-site scripting vulnerabilities listed below. Reflected cross-site scripting vulnerability due to insufficient verification of URL query parameters CWE-79 - CVE-2021-20672 Version| Vector| Score ---|---|--- CVSS v3|...

CVE-2019-20672

CVE-2019-20672 is a stored XSS vulnerability affecting NETGEAR RBR50, RBS50, and RBK50 (pre-2.3.5.30). Multiple sources (NVD, Red Hat, CNVD, CNVD-derived listings) confirm the issue stems from improper handling/validation of client-side data in the web application, enabling script execution via s...

strichpunkt-design.de XSS vulnerability

Open Bug Bounty ID: OBB-682121 Description| Value ---|--- Affected Website:| strichpunkt-design.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...