CVE-2020-11448

An issue was discovered on Bell HomeHub 3000 SG48222070 devices. There is XSS related to the email field and the login page...

Bell Home Hub 3000 Cross-Site Scripting Vulnerability

Bell Home Hub 3000 is a virtual repair tool from Bell Canada. It is used to quickly detect and fix problems with Bell Fibe Internet, TV and home phone services. A cross-site scripting vulnerability exists in Bell Home Hub 3000 SG48222070, which stems from the presence of cross-site scripting in t...

CVE-2020-11448

An issue was discovered on Bell HomeHub 3000 SG48222070 devices. There is XSS related to the email field and the login page...

CVE-2023-40851

Cross Site Scripting XSS vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to run arbitrary code via fname, lname, email, and contact fields of the user registration page...

CVE-2023-40851

Cross Site Scripting XSS vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to run arbitrary code via fname, lname, email, and contact fields of the user registration page...

PT-2023-18360 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 7.14 through 15.11.10 GitLab CE/EE versions 16.0 through 16.0.6 GitLab CE/EE versions 16.1 through 16.1.1 Description: An issue has been discovered in GitLab CE/EE, which allows an attacker to inject HTML in an email...

GitLab 跨站脚本漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A security vulnerability exists in GitLab CE/EE versions 7.14 through 15.11.10,...

Multiple plugins by vcita - Contributor+ Stored Cross-Site Scripting

The plugin does not sanitize and the email field in the plugin settings, which could allow users with roles as low as contributor to inject arbitrary web scripts in the plugin settings page, which could target high privilege users such as administrators. PoC...

CVE-2023-28467

In MyBB before 1.8.34, there is XSS in the User CP module via the user email field...

CVE-2023-28467

In MyBB before 1.8.34, there is XSS in the User CP module via the user email field...

CVE-2023-28467

In MyBB before 1.8.34, there is XSS in the User CP module via the user email field...

Design/Logic Flaw

In MyBB before 1.8.34, there is XSS in the User CP module via the user email field...

CVE-2023-28467

In MyBB before 1.8.34, there is XSS in the User CP module via the user email field...

PT-2023-21737 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.34 Description: The issue concerns a cross-site scripting XSS flaw in the User CP module, specifically via the user email field. This allows for potential malicious script execution. Recommendations: For versions...

CVE-2023-28467

In MyBB before 1.8.34, there is XSS in the User CP module via the user email field...

PT-2023-18908 · Avantfax · Avantfax

Name of the Vulnerable Software and Affected Versions: AvantFAX version 3.3.7 Description: A Stored Cross-Site Scripting XSS issue exists, allowing an authenticated low-privilege user to inject arbitrary Javascript into their e-mail address. This code is executed when an administrator logs in to...

Enhancesoft osTicket 跨站脚本漏洞

Enhancesoft osTicket is an open source ticketing system from Enhancesoft, Inc. in the United States. A cross-site scripting vulnerability exists in Enhancesoft osTicket versions prior to 1.16.6, which stems from the presence of a stored cross-site scripting XSS vulnerability. The vulnerability ca...

PT-2023-12251 · Unknown · Sourcecodester Mobile-Shop-System-Php-Mysql

Name of the Vulnerable Software and Affected Versions: sourcecodester mobile-shop-system-php-mysql version 1.0 Description: The issue allows remote attackers to log in via a crafted string in the email field of the log in page, due to a SQL injection vulnerability. Recommendations: For...

Demanzo Matrimony 1.5 Cross Site Request Forgery

==================================================================================================================================== | Title : Demanzo Matrimony v.1.5 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 109.0.132-bit | |...

PT-2022-26019 · Unknown · Raiden Maild Mail Server

Name of the Vulnerable Software and Affected Versions: Raiden MAILD Mail Server affected versions not specified Description: The issue is related to insufficient filtering for user input in the website mail field of the Raiden MAILD Mail Server. A remote attacker with general user privilege can...