CVE-2020-7990

Adive Framework 2.0.8 has admin/user/add userName XSS...

Cross site scripting

Adive Framework 2.0.8 has admin/user/add userName XSS...

Cross site scripting

Adive Framework 2.0.8 has admin/user/add userUsername XSS...

CVE-2020-7989

Adive Framework 2.0.8 has admin/user/add userUsername XSS...

CVE-2020-7989

Mode C (Normal) — CVE-2020-7989 affects Adive Framework 2.0.8, with a Cross-Site Scripting flaw in the admin/user/add userUsername path. Root cause cited in CNVD entry: lack of proper validation of client-side data by the web application. Documented impact includes XSS exposure, with NVD indicati...

CVE-2020-7990

Adive Framework 2.0.8 has admin/user/add userName XSS...

Input validation

ISPConfig 3.0.4.3: the "Add new Webdav user" can chmod and chown entire server from client interface...

Huawei EulerOS: Security Advisory for firefox (EulerOS-SA-2016-1085)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Advie Framework 2.0.8 Cross Site Scripting

Exploit Title: Adive Framework 2.0.8 - Persistent Cross-Site Scripting Exploit Author: Sarthak Saini Dork: N/A Date: 2020-01-18 Vendor Link : https://www.adive.es/ Software Link: https://github.com/ferdinandmartin/adive-php7 Version: 2.0.8 Category: Webapps Tested on: windows64bit / mozila firefo...

Adive Framework 2.0.8 - Persistent Cross-Site Scripting

Exploit Title: Adive Framework 2.0.8 - Persistent Cross-Site Scripting Exploit Author: Sarthak Saini Dork: N/A Date: 2020-01-18 Vendor Link : https://www.adive.es/ Software Link: https://github.com/ferdinandmartin/adive-php7 Version: 2.0.8 Category: Webapps Tested on: windows64bit / mozila firefo...

CVE-2019-19859

An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. The Add Collaborator allows unlimited data via the author parameter, even if the data does not match anything in the database...

CVE-2019-19859

An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. The Add Collaborator allows unlimited data via the author parameter, even if the data does not match anything in the database...

Cross site scripting

An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. admin/adduser/UID allows stored XSS via the author parameter...

Code injection

An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. The Add Collaborator allows unlimited data via the author parameter, even if the data does not match anything in the database...

CVE-2019-19859

An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. The Add Collaborator allows unlimited data via the author parameter, even if the data does not match anything in the database...

CVE-2019-19859

The CVE-2019-19859 entry concerns Serpico (SimplE RePort wrIting and CollaboratiOn tool) version 1.3.0. The vulnerability is described as an input validation error in the Add Collaborator feature, where the author parameter allows unlimited data to be submitted even if it does not match existing ...

Serpico Cross-Site Scripting Vulnerability (CNVD-2020-03851)

Serpico is a penetration test report generation and collaboration tool. A cross-site scripting vulnerability exists in admin/adduser/UID in Serpico version 1.3.0, which stems from the lack of proper validation of client-side data in a WEB application and can be exploited by an attacker to execute...

Design/Logic Flaw

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName parameter in add-product.php...

CVE-2020-5308

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName parameter in add-product.php...

CVE-2020-5308

PHPGurukul Dairy Farm Shop Management System 1.0 is affected by SQL injection (CVE-2020-5307) as demonstrated by input vectors in index.php (username), add-category.php (category, CategoryCode), add-company.php (CompanyName), and add-product.php (ProductName, ProductPrice). Root cause: lack of va...