CVE-2023-33405

CVE-2023-33405 BlogEngine.NET CMS（バージョン 3.3.8.0 以前）で確認されたオープンリダイレクトの脆弱性 default.aspx ページへの GET リクエストの URL 内に "years=" が含まれている場合、アプリケーションは "Redirect" という名前の関数を呼び出します。 この関数は、year、month、date、page、rewrite を含む複数のパラメータを設定します。date パラメータは DateTime オブジェクトを使用して解析されますが、month パラメータと year パラメータは検証されておらず、rewri...

CVE-2025-51683

A blind SQL Injection SQLi vulnerability in mJobtime v15.7.2 allows unauthenticated attackers to execute arbitrary SQL statements via a crafted POST request to the /Default.aspx/updateprofileServer endpoint...

EUVD-2025-200092

A blind SQL Injection SQLi vulnerability in mJobtime v15.7.2 allows unauthenticated attackers to execute arbitrary SQL statements via a crafted POST request to the /Default.aspx/updateprofileServer endpoint...

CVE-2025-51683

A blind SQL Injection SQLi vulnerability in mJobtime v15.7.2 allows unauthenticated attackers to execute arbitrary SQL statements via a crafted POST request to the /Default.aspx/updateprofileServer endpoint...

EUVD-2006-4959

Malware in sbrugna...

CVE-2025-27954

An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the usertoken function of default.aspx...

CVE-2025-27954: Improper Neutralization of Special Elements used in a Command

An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the usertoken function of default.aspx...

CVE-2022-45890

In Planet eStream before 6.72.10.07, a Reflected Cross-Site Scripting XSS vulnerability exists via any metadata filter field e.g., search within Default.aspx with the r or fo parameter...

CVE-2025-1806: Improper Authorization

A vulnerability, which was classified as problematic, has been found in Eastnets PaymentSafe 2.5.26.0. Affected by this issue is some unknown functionality of the file /Default.aspx of the component URL Handler. The manipulation leads to improper authorization. The attack may be launched remotely...

CVE-2025-1806 Eastnets PaymentSafe URL Default.aspx improper authorization

A vulnerability, which was classified as problematic, has been found in Eastnets PaymentSafe 2.5.26.0. Affected by this issue is some unknown functionality of the file /Default.aspx of the component URL Handler. The manipulation leads to improper authorization. The attack may be launched remotely...

CVE-2022-45895

Planet eStream before 6.72.10.07 discloses sensitive information, related to the ON cookie findable in HTML source code for Default.aspx in some situations and the WhoAmI endpoint e.g., path disclosure...

Cross site scripting

In Planet eStream before 6.72.10.07, a Reflected Cross-Site Scripting XSS vulnerability exists via any metadata filter field e.g., search within Default.aspx with the r or fo parameter...

CVE-2022-45895: Exposure of Resource to Wrong Sphere

Planet eStream before 6.72.10.07 discloses sensitive information, related to the ON cookie findable in HTML source code for Default.aspx in some situations and the WhoAmI endpoint e.g., path disclosure...

CVE-2022-45890: Improper Neutralization of Input During Web Page Generation

In Planet eStream before 6.72.10.07, a Reflected Cross-Site Scripting XSS vulnerability exists via any metadata filter field e.g., search within Default.aspx with the r or fo parameter...

Cerner Mobile Care SQL注入漏洞

Cerner Mobile Care is connecting providers, clinical care teams and IT architects with patients. A security vulnerability exists in Cerner Mobile Care version 5.0.0 where an unauthenticated, remote attacker could execute arbitrary SQL commands via a full apostrophe in the default.aspx user ID fie...

CVE-2020-8788

Synaptive Medical ClearCanvas ImageServer 3.0 Alpha allows XSS and HTML injection via the Default.aspx UserName parameter. NOTE: the issues/227 reference does not imply that the affected product can be downloaded from GitHub. It was simply a convenient location for a public bug report...

CVE-2020-8788

Synaptive Medical ClearCanvas ImageServer 3.0 Alpha allows XSS and HTML injection via the Default.aspx UserName parameter. NOTE: the issues/227 reference does not imply that the affected product can be downloaded from GitHub. It was simply a convenient location for a public bug report...

Design/Logic Flaw

Synaptive Medical ClearCanvas ImageServer 3.0 Alpha allows XSS and HTML injection via the Default.aspx UserName parameter. NOTE: the issues/227 reference does not imply that the affected product can be downloaded from GitHub. It was simply a convenient location for a public bug report...

CVE-2020-8788

Synaptive Medical ClearCanvas ImageServer 3.0 Alpha allows XSS and HTML injection via the Default.aspx UserName parameter. NOTE: the issues/227 reference does not imply that the affected product can be downloaded from GitHub. It was simply a convenient location for a public bug report...

solomoncolors.com XSS vulnerability

Open Bug Bounty ID: OBB-611270 Description| Value ---|--- Affected Website:| solomoncolors.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...