4035 matches found
CVE-2023-2922
A vulnerability classified as problematic has been found in SourceCodester Comment System 1.0. Affected is an unknown function of the file index.php of the component GET Parameter Handler. The manipulation of the argument msg leads to cross site scripting. It is possible to launch the attack...
CVE-2023-2922
A vulnerability classified as problematic has been found in SourceCodester Comment System 1.0. Affected is an unknown function of the file index.php of the component GET Parameter Handler. The manipulation of the argument msg leads to cross site scripting. It is possible to launch the attack...
Cross site scripting
A vulnerability classified as problematic has been found in SourceCodester Comment System 1.0. Affected is an unknown function of the file index.php of the component GET Parameter Handler. The manipulation of the argument msg leads to cross site scripting. It is possible to launch the attack...
CVE-2023-2922 SourceCodester Comment System GET Parameter index.php cross site scripting
A vulnerability classified as problematic has been found in SourceCodester Comment System 1.0. Affected is an unknown function of the file index.php of the component GET Parameter Handler. The manipulation of the argument msg leads to cross site scripting. It is possible to launch the attack...
CVE-2023-2922
CVE-2023-2922 affects SourceCodester Comment System 1.0. The vulnerability is in the index.php file, within the GET Parameter Handler, where tampering the msg parameter triggers cross-site scripting. Exploitation is possible remotely and has been disclosed publicly. Several connected sources corr...
CVE-2023-2922 SourceCodester Comment System GET Parameter index.php cross site scripting
A vulnerability classified as problematic has been found in SourceCodester Comment System 1.0. Affected is an unknown function of the file index.php of the component GET Parameter Handler. The manipulation of the argument msg leads to cross site scripting. It is possible to launch the attack...
PT-2023-22212 · Unknown · Sourcecodester Comment System
Name of the Vulnerable Software and Affected Versions: SourceCodester Comment System version 1.0 Description: A problematic vulnerability has been found in the SourceCodester Comment System. The issue affects an unknown function of the file index.php, specifically the component GET Parameter...
SourceCodester Comment System 跨站脚本漏洞
Plohni Advanced Comment System is a comment system by Plohni Individual Developers. A cross-site scripting vulnerability exists in SourceCodester Comment System version 1.0 due to an unknown function in the file index.php in the component GET Parameter Handler, which could lead to cross-site...
Exploit for Cross-site Scripting in Wekan_Project Wekan
CVE-2023-31779 Stored XSS in Wekan Description: Stored...
CVE-2023-31779
Wekan v6.84 and earlier is vulnerable to Cross Site Scripting XSS. An attacker with user privilege on kanban board can insert JavaScript code in in "Reaction to comment" feature...
CVE-2023-31779
Wekan v6.84 and earlier is vulnerable to Cross Site Scripting XSS. An attacker with user privilege on kanban board can insert JavaScript code in in "Reaction to comment" feature...
EulerOS 2.0 SP11 : libXpm (EulerOS-SA-2023-1762)
According to the versions of the libXpm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and c...
Cross site scripting
A stored cross-site scripting XSS vulnerability in Typecho v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter at /index.php/archives/1/comment...
codehaus-plexus: XML External Entity (XXE) Injection
A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...
typecho 跨站脚本漏洞
typecho is a PHP blogging platform for typecho individual developers. It is simple and powerful. A security vulnerability exists in typecho v1.2.0, which can be exploited by an attacker to execute arbitrary web script or HTML using a crafted payload via the url parameter in...
CISA Requests for Comment on Secure Software Self-Attestation Form
CISA has issued requests for comment on the Secure Software Self-Attestation Form. CISA, in coordination with the Office of Budget and Management OMB, released proposed guidance on secure software. This guidance seeks to secure software leveraged by the federal government. CISA expects agencies t...
CVE-2022-27979
A cross-site scripting XSS vulnerability in ToolJet v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comment Body component...
Cross site scripting
A cross-site scripting XSS vulnerability in ToolJet v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comment Body component...