369 matches found
Cross site request forgery (csrf)
An issue in rmc R Beauty CLINIC Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...
Cross site request forgery (csrf)
An issue in Anglaise Company Anglaise.Company v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...
Cross site request forgery (csrf)
An issue in Marbre Lapin Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...
CVE-2023-38845
An issue in Anglaise Company Anglaise.Company v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...
CVE-2023-38849
An issue in tire-sales Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...
PT-2023-26626 · Unknown · Marbre Lapin Line
Name of the Vulnerable Software and Affected Versions: Marbre Lapin Line version 13.6.1 Description: The issue allows a remote attacker to obtain sensitive information via a crafted GET request. Recommendations: For Marbre Lapin Line version 13.6.1, consider restricting access to sensitive...
CVE-2023-38849
An issue in tire-sales Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...
Line Security Breach
Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that originates in the applet Anglaise Company Anglaise.Company v.13.6.1 version allows remote attackers to obtain sensitive information via a crafted GET request...
CVE-2023-38845
An issue in Anglaise Company Anglaise.Company v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...
The vulnerability in the web interface of Supermicro X11 series BMC IPMI servers involves insufficient protection of the website structure, allowing attackers to carry out cross-site scripting attacks.
The vulnerability in the web interface of BMC IPMI Supermicro X11 series servers exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using specially crafted GET requests...
CVE-2021-38243
xunruicms up to v4.5.1 was discovered to contain a remote code execution RCE vulnerability in /index.php. This vulnerability allows attackers to execute arbitrary code via a crafted GET request...
CVE-2023-36317
Cross Site Scripting XSS vulnerability in sourcecodester Student Study Center Desk Management System 1.0 allows attackers to run arbitrary code via crafted GET request to web application URL...
Cross site scripting
Cross Site Scripting XSS vulnerability in sourcecodester Student Study Center Desk Management System 1.0 allows attackers to run arbitrary code via crafted GET request to web application URL...
CVE-2023-36317
Cross Site Scripting XSS vulnerability in sourcecodester Student Study Center Desk Management System 1.0 allows attackers to run arbitrary code via crafted GET request to web application URL...
Cross site scripting
Cross Site Scripting XSS in Nagios XI 5.7.1 allows remote attackers to run arbitrary code via returnUrl parameter in a crafted GET request...
CVE-2020-23992
Cross Site Scripting XSS in Nagios XI 5.7.1 allows remote attackers to run arbitrary code via returnUrl parameter in a crafted GET request...
CVE-2023-39748
An issue in the component /userRpm/NetworkCfgRpm of TP-Link TL-WR1041N V2 allows attackers to cause a Denial of Service DoS via a crafted GET request...
CVE-2023-39749
D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the component /advresource. This vulnerability is exploited via a crafted GET request...