4197 matches found
Cross site scripting
OpenSIS Community Edition version 8.0 is affected by a cross-site scripting XSS vulnerability in the TakeAttendance.php via the cpidmissattn parameter...
CVE-2021-40310
OpenSIS Community Edition version 8.0 is affected by a cross-site scripting XSS vulnerability in the TakeAttendance.php via the cpidmissattn parameter...
CVE-2021-40310
OpenSIS Community Edition version 8.0 is affected by a cross-site scripting XSS vulnerability in the TakeAttendance.php via the cpidmissattn parameter...
CVE-2021-40310
OpenSIS Community Edition 8.0 is affected by a cross-site scripting (XSS) flaw in TakeAttendance.php via the cp_id_miss_attn parameter. The vulnerability context and PoC links are documented across multiple sources (e.g., PacketStorm and Exploit-DB entries), illustrating a reflected XSS payload u...
Cross-Site Request Forgery (CSRF) in hdinnovations/unit3d-community-edition
Description CSRF in flushing peer Proof of Concept 1. Login stafff/admin account 2. Access this link https://unit3d.site/dashboard/flush/peers 3. See that the peers has been flushed. Impact This vulnerability is capable of flushing peers...
CVE-2021-40310: Improper Neutralization of Input During Web Page Generation
OpenSIS Community Edition version 8.0 is affected by a cross-site scripting XSS vulnerability in the TakeAttendance.php via the cpidmissattn parameter...
PT-2021-22857
Name of the Vulnerable Software and Affected Versions OpenSIS Community Edition version 8.0 Description The issue is a cross-site scripting XSS vulnerability. It affects the TakeAttendance.php file via the cp id miss attn parameter. Recommendations For OpenSIS Community Edition version 8.0,...
Cross-Site Request Forgery (CSRF) in hdinnovations/unit3d-community-edition
Description Attacker is able to change a torrents featured state to un-featured if a logged in user visits attacker website. Proof of Concept When you logged in open this POC.html in a browser. You can check the torrents state changed to un-featured. history.pushState'', '', '/'...
CVE-2021-41381
Payara Micro Community 5.2021.6 and below allows Directory Traversal...
OpenSIS Community Edition Local File Inclusion Vulnerability
OpenSIS is the community edition of an open source enterprise content management system from Alfresco Software, Inc. The system includes document management, office collaboration and other features. openSIS Community Edition in versions prior to 7.6 there is a local file inclusion vulnerability,...
OpenSIS Community Edition Cross-Site Scripting Vulnerability
OpenSIS Community Edition is a community edition of Alfresco Software's open source enterprise content management system. The system includes document management, office collaboration and other features. openSIS Community Edition in version 7.6 and earlier versions of the cross-site scripting...
CVE-2021-27340
OpenSIS Community Edition version = 7.6 is affected by a reflected XSS vulnerability in EmailCheck.php via the "opt" parameter...
CVE-2021-27340
OpenSIS Community Edition version = 7.6 is affected by a reflected XSS vulnerability in EmailCheck.php via the "opt" parameter...
CVE-2021-27341
OpenSIS Community Edition version = 7.6 is affected by a local file inclusion vulnerability in DownloadWindow.php via the "filename" parameter...
CVE-2021-27340
OpenSIS Community Edition version = 7.6 is affected by a reflected XSS vulnerability in EmailCheck.php via the "opt" parameter...
CVE-2021-27341
OpenSIS Community Edition version = 7.6 is affected by a local file inclusion vulnerability in DownloadWindow.php via the "filename" parameter...
Design/Logic Flaw
OpenSIS Community Edition version = 7.6 is affected by a local file inclusion vulnerability in DownloadWindow.php via the "filename" parameter...
Cross site scripting
OpenSIS Community Edition version = 7.6 is affected by a reflected XSS vulnerability in EmailCheck.php via the "opt" parameter...