CVE-2021-40374

CVE-2021-40374 - Stored Cross-site Scripting in OpenEyes 3.5.1 Description A stored cross-site scripting XSS vulnerability was identified in OpenEyes 3.5.1, developed by the Apperta Foundation. Improper input handling in the 'Address1' parameter allowed for JavaScript to be injected into a patien...

PT-2024-28879 · Unknown · Puneethreddyhc Online Shopping System

Name of the Vulnerable Software and Affected Versions: PuneethReddyHC Online Shopping system advanced version 1.0 Description: The issue allows an attacker to execute arbitrary code. An unauthenticated remote attacker can manipulate the address1 variable in the "register.php" endpoint...

MAL-2024-7510 Malicious code in sap-address1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dfc83763f15fe8a3b658ce9605d37f6ba83c1cadc35698df05753622e7671bd6 The OpenSSF Package Analysis project identified 'sap-address1' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-address1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dfc83763f15fe8a3b658ce9605d37f6ba83c1cadc35698df05753622e7671bd6 The OpenSSF Package Analysis project identified 'sap-address1' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-23874

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/companymodify.php, in the address1 parameter. Exploitation of this vulnerability...

PT-2024-20143 · Cups Easy · Cups Easy

Name of the Vulnerable Software and Affected Versions: Cups Easy Purchase & Inventory version 1.0 Description: A Cross-Site Scripting XSS issue has been reported due to insufficient encoding of user-controlled inputs. This issue can be exploited via the "/cupseasylive/companymodify.php" API...

CVE-2024-23874: Improper Neutralization of Input During Web Page Generation

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/companymodify.php, in the address1 parameter. Exploitation of this vulnerability...

CVE-2021-40374

A stored cross-site scripting XSS vulnerability was identified in Apperta Foundation OpenEyes 3.5.1. Updating a patient's details allows remote attackers to inject arbitrary web script or HTML via the Address1 parameter. This JavaScript then executes when the patient profile is loaded, which coul...

Cross site scripting

A stored cross-site scripting XSS vulnerability was identified in Apperta Foundation OpenEyes 3.5.1. Updating a patient's details allows remote attackers to inject arbitrary web script or HTML via the Address1 parameter. This JavaScript then executes when the patient profile is loaded, which coul...

Apperta Foundation OpenEyes 跨站脚本漏洞

Apperta Foundation OpenEyes is an open source electronic medical record ERP from the Apperta Foundation. A security vulnerability in Apperta Foundation OpenEyes 3.5.1 allows remote attackers to inject arbitrary web script or HTML via the Address1 parameter...

CVE-2021-40374: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability was identified in Apperta Foundation OpenEyes 3.5.1. Updating a patient's details allows remote attackers to inject arbitrary web script or HTML via the Address1 parameter. This JavaScript then executes when the patient profile is loaded, which coul...

PT-2022-11222

Name of the Vulnerable Software and Affected Versions Apperta Foundation OpenEyes version 3.5.1 Description A stored cross-site scripting issue was identified, allowing remote attackers to inject arbitrary web script or HTML via the Address1 parameter when updating a patient's details. This...

Exploit for Cross-site Scripting in Apperta Openeye

CVE-2021-40374 - Stored Cross-site Scripting in OpenEyes 3.5.1...

CVE-2021-3298

Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter...

UBUNTU-CVE-2021-3298

Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter...

CVE-2021-3298

Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter...

CVE-2021-3298

Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter...

PT-2021-20005

Name of the Vulnerable Software and Affected Versions Collabtive version 3.1 Description The issue allows for XSS when an authenticated user enters an XSS payload into the address section of the profile edit page. Specifically, this occurs through the address1 parameter in the...

CVE-2021-3298: Improper Neutralization of Input During Web Page Generation

Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter...