CVE-2022-4585

Opencaching Deutschland oc-server3’s Cookie Handler contains a cross-site scripting (XSS) flaw in an unknown part of htdocs/templates2/ocstyle/start.tpl triggered by manipulating the usercountryCode parameter. The issue is exploitable remotely. A patch is available: c720f2777a452186c67ef30db3679d...

CVE-2022-4585: Improper Neutralization

A vulnerability classified as problematic has been found in Opencaching Deutschland oc-server3. This affects an unknown part of the file htdocs/templates2/ocstyle/start.tpl of the component Cookie Handler. The manipulation of the argument usercountryCode leads to cross site scripting. It is...

PT-2022-27657 · Opencaching Deutschland · Opencaching Deutschland Oc-Server3

Name of the Vulnerable Software and Affected Versions: Opencaching Deutschland oc-server3 affected versions not specified Description: A problematic vulnerability has been found in Opencaching Deutschland oc-server3, affecting the Cookie Handler component, specifically an unknown part of the file...

CVE-2022-4585 Opencaching Deutschland oc-server3 Cookie start.tpl cross site scripting

A vulnerability classified as problematic has been found in Opencaching Deutschland oc-server3. This affects an unknown part of the file htdocs/templates2/ocstyle/start.tpl of the component Cookie Handler. The manipulation of the argument usercountryCode leads to cross site scripting. It is...

Company Website CMS Access Control Error Vulnerability

Company Website CMS is a company website/CMS by Torrahclef Personal Developer. Company Website CMS suffers from an Access Control Error vulnerability that stems from incorrect access control in the file site-settings.php of the component Cookie Handler. An attacker could use this vulnerability to...

Improper access control

A vulnerability was found in SourceCodester Company Website CMS and classified as critical. Affected by this issue is some unknown functionality of the file site-settings.php of the component Cookie Handler. The manipulation leads to improper access controls. The attack may be launched remotely...

CVE-2022-2702 SourceCodester Company Website CMS Cookie site-settings.php access control

A vulnerability was found in SourceCodester Company Website CMS and classified as critical. Affected by this issue is some unknown functionality of the file site-settings.php of the component Cookie Handler. The manipulation leads to improper access controls. The attack may be launched remotely...

CVE-2022-2702 SourceCodester Company Website CMS Cookie site-settings.php access control

A vulnerability was found in SourceCodester Company Website CMS and classified as critical. Affected by this issue is some unknown functionality of the file site-settings.php of the component Cookie Handler. The manipulation leads to improper access controls. The attack may be launched remotely...

PT-2022-18184 · Sourcecodester · Sourcecodester Company Website Cms

Name of the Vulnerable Software and Affected Versions: SourceCodester Company Website CMS affected versions not specified Description: A critical issue was found in the SourceCodester Company Website CMS, affecting some unknown functionality of the file site-settings.php of the component Cookie...

CVE-2022-2702: Improper Access Control

A vulnerability was found in SourceCodester Company Website CMS and classified as critical. Affected by this issue is some unknown functionality of the file site-settings.php of the component Cookie Handler. The manipulation leads to improper access controls. The attack may be launched remotely...

Company Website CMS 访问控制错误漏洞

Company Website CMS is a company website/CMS by Torrahclef Personal Developer. Company Website CMS suffers from an Access Control Error vulnerability that stems from incorrect access control in the file site-settings.php of the component Cookie Handler. An attacker could use this vulnerability to...

CVE-2017-20104

A vulnerability was found in Simplessus 3.7.7. It has been declared as critical. This vulnerability affects unknown code of the component Cookie Handler. The manipulation of the argument UWASID leads to sql injection Time. The attack can be initiated remotely. The exploit has been disclosed to th...

Sql injection

A vulnerability was found in Simplessus 3.7.7. It has been declared as critical. This vulnerability affects unknown code of the component Cookie Handler. The manipulation of the argument UWASID leads to sql injection Time. The attack can be initiated remotely. The exploit has been disclosed to th...

CVE-2017-20104 Simplessus Cookie Time sql injection

A vulnerability was found in Simplessus 3.7.7. It has been declared as critical. This vulnerability affects unknown code of the component Cookie Handler. The manipulation of the argument UWASID leads to sql injection Time. The attack can be initiated remotely. The exploit has been disclosed to th...

PT-2022-7977

Name of the Vulnerable Software and Affected Versions Simplessus version 3.7.7 Description A critical issue affects the Cookie Handler component, where manipulation of the UWA SID argument leads to sql injection. This can be initiated remotely. The issue has been publicly disclosed and may be...

CVE-2017-20104: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Simplessus 3.7.7. It has been declared as critical. This vulnerability affects unknown code of the component Cookie Handler. The manipulation of the argument UWASID leads to sql injection Time. The attack can be initiated remotely. The exploit has been disclosed to th...

CVE-2016-15002

A vulnerability, which was classified as critical, was found in MONyog Ultimate 6.63. This affects an unknown part of the component Cookie Handler. The manipulation of the argument HasServerEdit/IsAdmin leads to privilege escalation. It is possible to initiate the attack remotely...

CVE-2016-15002 MONyog Ultimate Cookie privileges management

A vulnerability, which was classified as critical, was found in MONyog Ultimate 6.63. This affects an unknown part of the component Cookie Handler. The manipulation of the argument HasServerEdit/IsAdmin leads to privilege escalation. It is possible to initiate the attack remotely...

CVE-2016-15002: Improper Privilege Management

A vulnerability, which was classified as critical, was found in MONyog Ultimate 6.63. This affects an unknown part of the component Cookie Handler. The manipulation of the argument HasServerEdit/IsAdmin leads to privilege escalation. It is possible to initiate the attack remotely...

PT-2022-7845

Name of the Vulnerable Software and Affected Versions MONyog Ultimate version 6.63 Description A critical issue was discovered, affecting the Cookie Handler component. The manipulation of the HasServerEdit/IsAdmin argument can lead to privilege escalation. This issue can be exploited remotely...