CVE-2020-1771 Possible XSS in Customer user address book

Attacker is able craft an article with a link to the customer address book with malicious content JavaScript. When agent opens the link, JavaScript code is executed due to the missing parameter encoding. This issue affects: OTRS Community Edition: 6.0.26 and prior versions. OTRS: 7.0.15 and prior...

CVE-2020-1771

CVE-2020-1771 affects OTRS Community Edition up to 6.0.26 and OTRS up to 7.0.15. An attacker can craft an article with a link to the customer address book containing malicious JavaScript; when opened, the missing parameter encoding allows JavaScript execution (XSS-like). Public disclosures and pa...

PT-2020-15048 · Otrs +2 · Otrs +3

Name of the Vulnerable Software and Affected Versions: OTRS Community Edition versions 6.0.26 and prior OTRS versions 7.0.15 and prior Description: The issue allows an attacker to craft an article with a link to the customer address book containing malicious JavaScript content. When an agent open...

CVE-2014-5140

The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce 7 does not properly handle : colon characters, which allows remote authenticated users to conduct SQL injection attacks via the First name and Last name fields in the address book...

Sql injection

The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce 7 does not properly handle : colon characters, which allows remote authenticated users to conduct SQL injection attacks via the First name and Last name fields in the address book...

CVE-2014-5140

The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce 7 does not properly handle : colon characters, which allows remote authenticated users to conduct SQL injection attacks via the First name and Last name fields in the address book...

DEBIAN-CVE-2013-6364

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book...

CVE-2013-6364

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book...

CVE-2013-6364

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book...

CVE-2013-6364

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book...

UBUNTU-CVE-2013-6364

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book...

CVE-2013-6364

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book...

CVE-2013-6364

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book...

CVE-2013-6364

CVE-2013-6364 concerns the Horde Groupware Webmail Edition, where saving a search as a virtual address book is vulnerable to CSRF and XSS. The vulnerability arises in the webmail component when performing the save operation, enabling an attacker to induce cross-site requests or script execution i...

Apple iOS Messages Component Information Disclosure Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. Messages is an application component for sending text, photos and videos. An information disclosure vulnerability exists in the Messages component in versions of Apple iOS prior to 13, which can be exploited by an attacke...

Apple iOS and Apple iPadOS VoiceOver Component Lock Screen Bypass Vulnerability

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer.VoiceOver is one of the voice assistance components. A lock screen bypass vulnerability exists in the VoiceOver...

iPhone iOS 13 Lockscreen Bypass Flaw Exposes Contacts

An iPhone lock screen bypass has been discovered that could enable an attacker to access victims’ address books, including their contacts’ names, email addresses, phone numbers, mailing addresses and more. The hack was first discovered by researcher Jose Rodriguez, an Apple enthusiast based in...

WordPress woo-address-book plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. woo-address-book is a plugin for e-commerce sites that uses it to manage shipping addresses. A cross-site request forgery vulnerabilit...

CVE-2019-15770

The woo-address-book plugin before 1.6.0 for WordPress has save calls without nonce verification checks...

WordPress WooCommerce Address Book plugin <= 1.5.6 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found in WordPress WooCommerce Address Book plugin versions = 1.5.6. Solution Update the WordPress WooCommerce Address Book plugin to the latest available version at least 1.6.0...