Cross site scripting

A vulnerability, which was classified as problematic, was found in earclink ESPCMS P8.21120101. Affected is an unknown function of the component Content Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2023-0246 earclink ESPCMS Content cross site scripting

A vulnerability, which was classified as problematic, was found in earclink ESPCMS P8.21120101. Affected is an unknown function of the component Content Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2023-0246 earclink ESPCMS Content cross site scripting

A vulnerability, which was classified as problematic, was found in earclink ESPCMS P8.21120101. Affected is an unknown function of the component Content Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the...

EARCLINK ESPCMS 跨站脚本漏洞

Honghu Erchuang Netlink Information Technology EARCLINK ESPCMS is an enterprise website building system from China's Honghu Erchuang Netlink Information Technology Company. A cross-site scripting vulnerability exists in EARCLINK ESPCMS P8.21120101, which stems from an unknown function in the...

PT-2023-16109 · Earclink · Earclink Espcms

Name of the Vulnerable Software and Affected Versions: earclink ESPCMS version P8.21120101 Description: A problematic issue was found in the Content Handler component, leading to cross site scripting. The manipulation can be launched remotely. Recommendations: For earclink ESPCMS version...

CVE-2023-0246: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in earclink ESPCMS P8.21120101. Affected is an unknown function of the component Content Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2019-25097

A vulnerability was found in soerennb eXtplorer up to 2.1.12 and classified as critical. Affected by this issue is some unknown functionality of the component Directory Content Handler. The manipulation leads to path traversal. Upgrading to version 2.1.13 is able to address this issue. The name o...

UBUNTU-CVE-2019-25097

A vulnerability was found in soerennb eXtplorer up to 2.1.12 and classified as critical. Affected by this issue is some unknown functionality of the component Directory Content Handler. The manipulation leads to path traversal. Upgrading to version 2.1.13 is able to address this issue. The name o...

CVE-2019-25097

A vulnerability was found in soerennb eXtplorer up to 2.1.12 and classified as critical. Affected by this issue is some unknown functionality of the component Directory Content Handler. The manipulation leads to path traversal. Upgrading to version 2.1.13 is able to address this issue. The name o...

CVE-2019-25097

CVE-2019-25097 affects soerennb eXtplorer up to version 2.1.12. The vulnerability is a path traversal flaw in the Directory Content Handler component, enabling traversal due to unknown internal functionality. A fix is available in version 2.1.13, with patch identifier b8fcb888f4ff5e171c16797a4b07...

CVE-2019-25097 soerennb eXtplorer Directory Content path traversal

A vulnerability was found in soerennb eXtplorer up to 2.1.12 and classified as critical. Affected by this issue is some unknown functionality of the component Directory Content Handler. The manipulation leads to path traversal. Upgrading to version 2.1.13 is able to address this issue. The name o...

PT-2023-11355 · Soerennb · Extplorer

Name of the Vulnerable Software and Affected Versions: soerennb eXtplorer versions up to 2.1.12 Description: A critical issue was found in the Directory Content Handler component, leading to path traversal due to manipulation of some unknown functionality. Upgrading to version 2.1.13 addresses th...

eXtplorer 路径遍历漏洞

eXtplorer is a PHP-based file manager. A path traversal vulnerability exists in eXtplorer versions prior to 2.1.13, which stems from an issue with some unknown functionality of the component Directory Content Handler that can lead to path traversal...

CVE-2019-25097: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in soerennb eXtplorer up to 2.1.12 and classified as critical. Affected by this issue is some unknown functionality of the component Directory Content Handler. The manipulation leads to path traversal. Upgrading to version 2.1.13 is able to address this issue. The name o...

PT-2022-4490

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 103.0.5060.134 Microsoft Edge affected versions not specified Description The issue is related to a use after free vulnerability in the PDF content handler of the browsers, which can lead to heap corruption. A...

Apache Tika < 1.28.4, 2.4.x < 2.4.1 DoS Vulnerability

Apache Tika is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tika";...

UBUNTU-CVE-2022-30973

We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release. In Apache Tika, a regular expression in the StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only...

CVE-2022-30126

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

DEBIAN-CVE-2022-30126

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

PT-2021-2629

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 90.0.4430.72 Microsoft Edge affected versions not specified Description: The issue is related to the use of an uninitialized resource in the PDFium PDF content handler. It may allow a remote attacker to cause a...