User Management System and User Registration & Login and User Management System SQL Injection Vulnerabilities

User Registration & Login and User Management System is a user management system with admin panel. A security vulnerability exists in Phpgurukul User Registration & Login and User Management System With admin panel version 3.0, which originates from a vulnerability that allows an attacker to gain...

User Management System and User Registration & Login and User Management System Cross-Site Scripting Vulnerabilities

User Registration & Login and User Management System is a user management system with admin panel. A security vulnerability exists in Phpgurukul User Registration & Login and User Management System With admin panel version 3.0, which originates from a vulnerability that allows an attacker to run...

CVE-2023-4530

CVE-2023-4530 affects Turna Advertising Administration Panel prior to 1.1, where an SQL injection vulnerability arises from improper neutralization of special elements in SQL commands. The issue enables potential unauthorized disclosure and manipulation of data, with high impact across confidenti...

Decidim Access Control Error Vulnerability

Decidim is a participatory democracy framework, written in Ruby on Rails. An Access Control Error vulnerability exists in Decidim versions prior to 0.26.8, 0.27.4, and 0.27.4, which stems from the templates module not enforcing the correct permissions, which allows any logged in user to access th...

Improper Access Control

Overview decidim-templates is a This module provides a solution to create templates for different Decidim models, such as Proposals and Questionnaires. Affected versions of this package are vulnerable to Improper Access Control due to the broken access control in the templates module. An attacker...

CVE-2023-43260

Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 was discovered to contain a cross-site scripting XSS vulnerability via the admin panel...

CVE-2023-43260

Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 was discovered to contain a cross-site scripting XSS vulnerability via the admin panel...

CVE-2023-43260

Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 was discovered to contain a cross-site scripting XSS vulnerability via the admin panel...

Cross site scripting

Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 was discovered to contain a cross-site scripting XSS vulnerability via the admin panel...

CVE-2023-43260

Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 was discovered to contain a cross-site scripting XSS vulnerability via the admin panel...

CVE-2023-43260

CVE-2023-43260 affects Milesight UR5X, UR32L, UR32, UR35, UR41 prior to version 35.3.0.7 with an XSS vulnerability exploitable via the admin panel. The vulnerability is documented across multiple feeds (NVD/Red Hat/CVE lists) and is mitigated by upgrading to version 35.3.0.7 or later (per PT-2023...

CVE-2023-43260

Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 was discovered to contain a cross-site scripting XSS vulnerability via the admin panel...

Milesight Cross-Site Scripting Vulnerability

Milesight is a complete Artificial Intelligence Video Surveillance solution from China's StarZone IOT Milesight. A cross-site scripting vulnerability exists in Ursalink Milesight UR5X, UR32L, UR32, UR35, UR41 , Industrial Cellular Routers prior to v35.3.0.7, which stems from the admin panel being...

PT-2023-28748 · Milesight · Milesight Ur32L +3

Name of the Vulnerable Software and Affected Versions: Milesight UR5X, UR32L, UR32, UR35, UR41 versions prior to 35.3.0.7 Description: A cross-site scripting XSS issue was discovered in the admin panel of the affected devices. This issue allows for malicious scripts to be injected into the websit...

CVE-2023-4564

This vulnerability could allow an attacker to store a malicious JavaScript payload in the broadcast message parameter within the admin panel...

Design/Logic Flaw

This vulnerability could allow an attacker to store a malicious JavaScript payload in the broadcast message parameter within the admin panel...

CVE-2023-4564 Multiple vulnerabilities in Canopsis of Capensis

This vulnerability could allow an attacker to store a malicious JavaScript payload in the broadcast message parameter within the admin panel...

CVE-2023-4564 Multiple vulnerabilities in Canopsis of Capensis

This vulnerability could allow an attacker to store a malicious JavaScript payload in the broadcast message parameter within the admin panel...

CVE-2023-4564 Multiple vulnerabilities in Canopsis of Capensis

This vulnerability could allow an attacker to store a malicious JavaScript payload in the broadcast message parameter within the admin panel...

CVE-2023-4564

CVE-2023-4564 affects Canopsis (Capensis) with a stored cross-site scripting (XSS) flaw in the admin panel that allows an attacker to store a malicious JavaScript payload via the broadcast message parameter. The Red Hat, NVD, OSV, and related records consistently describe a stored XSS in the broa...