224 matches found
CVE-2020-21783
CVE-2020-21783 refers to an XSS vulnerability in IBOS 4.5.4 where the issue is in the emailbody[content] parameter. Publicly documented impact supports cross-site scripting with user interaction likely required per CVSS3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). NVD lists base scores of 4.3...
QNAP NAS 安全漏洞
Qnap Systems QNAP NAS running Multimedia Console is an application from China Weilian Qnap Systems. A Multimedia Console. A security vulnerability exists in QNAP NAS that stems from insecure storage of sensitive information in myQNAPcloud Link. The following products and versions are affected: QN...
WordPress Essential Addons for Elementor Lite Plugin Cross-Site Scripting Vulnerability
WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress Essential Addons for Elementor Lite Plugin versions prior to 4.5.4. An attacker can exploit this vulnerability to launch a cross-site scripting attack...
Invision Community SQL Injection Vulnerability
Invision Community is a software for designing and developing UI for mobile applications by Invision USA. An SQL injection vulnerability exists in IPS Community Suite versions 4.5.4, which originates from the Downloads REST API...
IPS Community Suite 4.5.4 SQL Injection
----------------------------------------------------------------------------- IPS Community Suite sortBy == 'popular' 56. 57. \IPS\Request::i-sortDir = \IPS\Request::i-sortDir ?: 'ASC'; 58. $sortBy = 'filerating ' . \IPS\Request::i-sortDir . ', filereviews'; 59. $where = array array 'filerating?'...
CVE-2020-29477
Invision Community 4.5.4 is affected by cross-site scripting XSS in the Field Name field. This vulnerability can allow an attacker to inject the XSS payload in Field Name and each time any user will open that, the XSS triggers and the attacker can able to steal the cookie according to the crafted...
Cross site scripting
Invision Community 4.5.4 is affected by cross-site scripting XSS in the Field Name field. This vulnerability can allow an attacker to inject the XSS payload in Field Name and each time any user will open that, the XSS triggers and the attacker can able to steal the cookie according to the crafted...
CVE-2020-29477
Invision Community 4.5.4 is affected by cross-site scripting XSS in the Field Name field. This vulnerability can allow an attacker to inject the XSS payload in Field Name and each time any user will open that, the XSS triggers and the attacker can able to steal the cookie according to the crafted...
Invision Community 跨站脚本漏洞
Invision Community is a software for designing and developing mobile application UI from Invision, Inc. in the United States. A cross-site scripting vulnerability exists in Invision Community version 4.5.4, which can be exploited to inject an XSS payload in the field Name, which can be used by an...
Invision Community 4.5.4 - 'Field Name' Stored Cross-Site Scripting
Exploit Title: Invision Community 4.5.4 - 'Field Name' Stored Cross-Site Scripting Date: 02-12-2020 Exploit Author: Hemant Patidar HemantSolo Vendor Homepage: https://invisioncommunity.com/ Software Link: https://invisioncommunity.com/buy Version: 4.5.4 Tested on: Windows 10/Kali Linux CVE:...
RHEL 7 : OpenShift Container Platform 4.5.4 jenkins-2-plugins (RHSA-2020:3207)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:3207 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud...
TYPO3 Information Disclosure Vulnerability (CNVD-2019-41228)
TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A security vulnerability exists in TYPO3 versions prior to 4.5.4. An attacker can exploit the vulnerability to disclose information...
TYPO3 Information Disclosure Vulnerability (CNVD-2019-41225)
TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A security vulnerability exists in TYPO3 versions prior to 4.3.12, 4.4.x prior to 4.4.9, and 4.5.x prior to 4.5.4. An attacker could exploit the vulnerability to disclose information...
CVE-2011-4900
TYPO3 before 4.5.4 allows Information Disclosure in the backend...
CVE-2011-4900
TYPO3 before 4.5.4 allows Information Disclosure in the backend...
CVE-2011-4901
TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to extract arbitrary information from the TYPO3 database...
Adobe Digital Editions Memory Corruption Vulnerability (CNVD-2017-26431)
Adobe Digital Editions DE is a set of e-book reading and management software of the United States Ordoby Adobe. Through the software can open, read and manage PDF, XML, Flash files. A memory corruption vulnerability exists in Adobe DE 4.5.4 and earlier versions. An attacker could exploit this...
Adobe Digital Editions Heap Buffer Overflow Vulnerability (CNVD-2017-26429)
Adobe Digital Editions DE is a set of e-book reading and management software of the United States Ordoby Adobe. Through the software can open, read and manage PDF, XML, Flash files. A heap buffer overflow vulnerability exists in Adobe DE 4.5.4 and earlier versions. An attacker can exploit this...
Adobe Digital Editions Memory Misreference Vulnerability (CNVD-2017-26436)
Adobe Digital Editions DE is a set of e-book reading and management software of the United States Ordoby Adobe. Through the software can open, read and manage PDF, XML, Flash files. A memory misreference vulnerability exists in Adobe DE 4.5.4 and earlier versions. An attacker can exploit this...
