68 matches found
EUVD-2006-1147
Malware in sbrugna...
EUVD-2006-0788
Malware in sbrugna...
PT-2024-17472 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.116 Description: A vulnerability has been found in DedeCMS, affecting an unknown function of the file /member/article add.php. The manipulation of the body argument leads to cross-site scripting. It is possible to launch t...
DesDev DedeCMS 代码注入漏洞
DesDev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China Zhuozhuo DesDev. The system has features such as content publishing, content management, content editing and content retrieval. A code injection vulnerability exists in DesDe...
CVE-2024-51242
A Server-Side Request Forgery SSRF vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java. The manipulation of the HTTP Body ip parameter leads to SSRF...
PT-2024-34570 · Eladmin · Eladmin
Name of the Vulnerable Software and Affected Versions: eladmin versions 2.7 and earlier Description: A Server-Side Request Forgery SSRF issue has been identified. The manipulation of the HTTP Body ip parameter leads to SSRF. This occurs in the ServerDeployController.java file. Recommendations: Fo...
CVE-2024-6370
A vulnerability classified as problematic was found in LabVantage LIMS 2017. Affected by this vulnerability is an unknown functionality of the file /labvantage/rc?command=file&file=WEB-OPAL/pagetypes/bulletins/sendbulletin.jsp of the component POST Request Handler. The manipulation of the argumen...
CVE-2024-36399
Kanboard is project management software that focuses on the Kanban methodology. The vuln is in app/Controller/ProjectPermissionController.php function addUser. The users permission to add users to a project only get checked on the URL parameter projectid. If the user is authorized to add users to...
CVE-2023-6953: Improper Neutralization of Input During Web Page Generation
The PDF Generator For Fluent Forms – The Contact Form Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the header, PDF body and footer content parameters in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes ...
Netlify CMS 跨站脚本漏洞
Netlify CMS is a website builder system from the American company Netlify. A security vulnerability exists in Netlify CMS version v.2.10.192. An attacker can exploit this vulnerability to execute arbitrary code via the payload of the body parameter of a specially crafted post function...
CVE-2023-38904: Improper Neutralization of Input During Web Page Generation
A Cross Site Scripting XSS vulnerability in Netlify CMS v.2.10.192 allows a remote attacker to execute arbitrary code via a crafted payload to the body parameter of the new post function...
SUSE CVE-2004-1013
The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as 1 "bodyp", 2 "binaryp", or 3 "binaryp" that cause an index increment error that leads to an out-of-bounds memory corruption...
CVE-2022-40844
In Tenda Shenzhen Tenda Technology Co., Ltd AC1200 Router model W15Ev2 V15.11.0.101576, a Stored Cross Site Scripting XSS issue exists allowing an attacker to execute JavaScript code via the applications website filtering tab, specifically the URL body...
Textpattern CMS 跨站脚本漏洞
Textpattern CMS is a Php-based content management system from the Textpattern team. A cross-site scripting vulnerability exists in Textpattern CMS version 4.8.7, which stems from the "Body" parameter being vulnerable to HTML injection...
PT-2022-11978
Name of the Vulnerable Software and Affected Versions textpattern version 4.8.7 Description The issue allows a remote and unauthenticated attacker to trigger remote code execution by uploading a webshell via Cross Site Scripting XSS in the "/textpattern/index.php" endpoint, specifically in the Bo...
CVE-2021-25103
The Translate WordPress with GTranslate WordPress plugin before 2.9.7 does not sanitise and escape the body parameter in the urladdon/gtranslate-email.php file before outputting it back in the page, leading to a Reflected Cross-Site Scripting issue. Note: exploitation of the issue requires...
CVE-2021-25103: Improper Neutralization of Input During Web Page Generation
The Translate WordPress with GTranslate WordPress plugin before 2.9.7 does not sanitise and escape the body parameter in the urladdon/gtranslate-email.php file before outputting it back in the page, leading to a Reflected Cross-Site Scripting issue. Note: exploitation of the issue requires...
PT-2022-9658
Name of the Vulnerable Software and Affected Versions Translate WordPress with GTranslate WordPress plugin versions prior to 2.9.7 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the body parameter in the url addon/gtranslate-email.php file is not...