CVE-2022-34268

An issue was discovered in RWS WorldServer before 11.7.3. /clientLogin deserializes Java objects without authentication, leading to command execution on the host...

CVE-2022-34268

An issue was discovered in RWS WorldServer before 11.7.3. /clientLogin deserializes Java objects without authentication, leading to command execution on the host...

CVE-2023-27425

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in James Irving-Swift Electric Studio Client Login plugin = 0.8.1 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in James Irving-Swift Electric Studio Client Login plugin = 0.8.1 versions...

CVE-2023-27425 WordPress Electric Studio Client Login Plugin <= 0.8.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in James Irving-Swift Electric Studio Client Login plugin = 0.8.1 versions...

CVE-2023-27425

CVE-2023-27425 affects the WordPress plugin Electric Studio Client Login (James Irving-Swift) &lt;= 0.8.1. The vulnerability is a Stored Cross-Site Scripting (XSS) flaw exploitable by users with admin+ privileges, caused by inadequate input cleanup/output handling. Affected version scope is limit...

WordPress Plugin Electric Studio Client Login 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

CVE-2023-27425: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in James Irving-Swift Electric Studio Client Login plugin = 0.8.1 versions...

WordPress Electric Studio Client Login Plugin <= 0.8.1 is vulnerable to Cross Site Scripting (XSS)

Software Electric Studio Client Login Type Plugin Vulnerable versions = 0.8.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-27425 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID e719915b675a Credits Padavishree...

Simple House Rental System 1 Shell Upload

Simple House Rental System Unrestricted File Upload + RCE Author: D4rkP0w4r Note = login to client, don't need login to admin Description = Login to client = Upload web shell at Image Step to Reproduct Login to client - Register - Apartment Registration - Image - Submit Exploit Upload web shell a...

RATES SYSTEM 1.0 SQL Injection

Exploit Title: RATES SYSTEM 1.0 - Authentication Bypass Date: 2020-08-13 Exploit Author: Azumah Foresight Xorlali M4sk0ff Vendor Homepage: https://www.sourcecodester.com/php/14904/rates-system.html Software Link:...

RATES SYSTEM 1.0 - Authentication Bypass Vulnerability

Exploit Title: RATES SYSTEM 1.0 - Authentication Bypass Exploit Author: Azumah Foresight Xorlali M4sk0ff Vendor Homepage: https://www.sourcecodester.com/php/14904/rates-system.html Software Link: https://www.sourcecodester.com/download-code?nid=14904&title=RATES+SYSTEM+in+PHP+Free+Source+Code...

The vulnerability of the “Client Login” module of the Magento Commerce software platform allows a perpetrator to compromise data integrity.

The vulnerability of the “Client Login” module of the Magento Commerce software platform for online store development and management is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise data integrity...

CVE-2020-27121 Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability

A vulnerability in Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P Software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication Service on an affected device to restart, resulting in a denial of service DoS condition. The vulnerability is...

PT-2020-4617

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P Software affected versions not specified Description A vulnerability in the software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication...

ui.mystatscenter.com XSS vulnerability

Open Bug Bounty ID: OBB-676721 Description| Value ---|--- Affected Website:| ui.mystatscenter.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-18023

Office Tracker 11.2.5 has XSS via the logincount parameter to the /otweb/OTPClientLogin URI...

excellenceauditing.com XSS vulnerability

Open Bug Bounty ID: OBB-459031 Description| Value ---|--- Affected Website:| excellenceauditing.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Design/Logic Flaw

Moxa MXView 2.8 allows remote attackers to cause a Denial of Service by sending overly long junk payload for the MXView client login credentials...

Mobiketa 3.5 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Mobiketa - Complete Mobile Marketing v3.5 Script - SQL Injection Google Dork: N/A Date: 09.02.2017 Vendor Homepage: http://ynetinteractive.com/ Software Buy:...