86 matches found
PT-2023-29672 · Spider Teams · Spider Teams Applyonline
Name of the Vulnerable Software and Affected Versions: Spider Teams ApplyOnline – Application Form Builder and Manager plugin versions = 2.5.2 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject...
WordPress ApplyOnline – Application Form Builder and Manager Plugin <= 2.5.3 is vulnerable to Broken Access Control
Software ApplyOnline – Application Form Builder and Manager Type Plugin Vulnerable versions = 2.5.3 Fixed in 2.5.4 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-46080 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID baadd6626a79...
WordPress ApplyOnline – Application Form Builder and Manager Plugin <= 2.5.5 is vulnerable to Cross Site Scripting (XSS)
Software ApplyOnline – Application Form Builder and Manager Type Plugin Vulnerable versions = 2.5.5 Fixed in 2.5.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45756 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID...
WordPress ApplyOnline – Application Form Builder and Manager Plugin <= 2.5.5 is vulnerable to Cross Site Scripting (XSS)
Software ApplyOnline – Application Form Builder and Manager Type Plugin Vulnerable versions = 2.5.5 Fixed in 2.5.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24391 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID...
CVE-2022-29359
A stored cross-site scripting XSS vulnerability in /scas/?page=clubs/applicationform&id=7 of School Club Application System v0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter...
CVE-2022-29359
A stored cross-site scripting XSS vulnerability in /scas/?page=clubs/applicationform&id=7 of School Club Application System v0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter...
School Club Application System 跨站脚本漏洞
School Club Application System is a school club application system by Carlo Montero Personal Developer. A security vulnerability exists in School Club Application System version 0.1, which originates from a stored cross-site scripting XSS vulnerability in /scas/?page=clubs/applicationform&id=7. A...
PT-2022-19561
Name of the Vulnerable Software and Affected Versions School Club Application System version v0.1 Description A stored cross-site scripting XSS issue exists in the /scas/?page=clubs/application form&id=7 endpoint of the School Club Application System, allowing attackers to execute arbitrary web...
Lazarus APT Hackers are now using BMP images to hide RAT malware
A spear-phishing attack operated by a North Korean threat actor targeting its southern counterpart has been found to conceal its malicious code within a bitmap .BMP image file to drop a remote access trojan RAT capable of stealing sensitive information. Attributing the attack to the Lazarus Group...
car-loan-application-form-and-agreement.com Cross Site Scripting vulnerability OBB-1272413
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2019-16070
A number of stored Cross-site Scripting XSS vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threat actor to inject malicious code directly into the application through web application form inputs...
CVE-2019-16070: Improper Neutralization of Input During Web Page Generation
A number of stored Cross-site Scripting XSS vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threat actor to inject malicious code directly into the application through web application form inputs...
PT-2020-9786
Name of the Vulnerable Software and Affected Versions NETSAS Enigma NMS versions 65.0.0 and prior Description A number of stored Cross-site Scripting XSS vulnerabilities were identified that could allow a threat actor to inject malicious code directly into the application through web application...
Name+DOB+SSN=FAFSA Data Gold Mine
KrebsOnSecurity has sought to call attention to online services which expose sensitive consumer data if the user knows a handful of static details about a person that are broadly for sale in the cybercrime underground, such as name, date of birth, and Social Security Number. Perhaps the most...
wasrti.org XSS vulnerability
Open Bug Bounty ID: OBB-376057 Description| Value ---|--- Affected Website:| wasrti.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Wordpress candidate-application-form plugin file download vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation. candidate-application-form is one of the plugins used to add a candidate application form to a job opening. A file download vulnerability exists in version v1.0 of the Wordpress...
CVE-2015-1000005
Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin...
CVE-2015-1000005
CVE-2015-1000005 affects the WordPress plugin Candidate Application Form (v1.0;
CVE-2015-1000005: Improper Limitation of a Pathname to a Restricted Directory
Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin...
PT-2016-3573
Name of the Vulnerable Software and Affected Versions candidate-application-form version 1.0 Description A remote file download issue exists in the candidate-application-form WordPress plugin. Recommendations For version 1.0, at the moment, there is no information about a newer version that...