Cross-site scripting (XSS) vulnerability in CakePHP

Cross-site scripting XSS vulnerability in cake/libs/error.php in CakePHP before 1.1.7.3363 allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in a 404 "Not Found" error page. NOTE: some of these details are obtained from third party information...

Cross-site Scripting (XSS) in Error Page

Description The is an XSS could be trigger via error page through invalid file name. Proof of Concept 1.Login as Admin. 2.Upload new file with name .svg 3.Save - Fatal Error Page show up and the xss will be trigger...

GHSA-RH6C-JH4C-9FG3 mailman Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page...

mailman Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page...

Databasir 代码问题漏洞

Databasir is a team-oriented relational database model document management platform. A security vulnerability exists in Databasir 1.01. The vulnerability stems from the fact that during the JDBC driver download validation process, the corresponding JDBC driver download address is downloaded first...

CVE-2021-26092

Failure to sanitize input in the SSL VPN web portal of FortiOS 5.2.10 through 5.2.15, 5.4.0 through 5.4.13, 5.6.0 through 5.6.14, 6.0.0 through 6.0.12, 6.2.0 through 6.2.7, 6.4.0 through 6.4.4; and FortiProxy 1.2.0 through 1.2.9, 2.0.0 through 2.0.1 may allow a remote unauthenticated attacker to...

CVE-2021-26092

Failure to sanitize input in the SSL VPN web portal of FortiOS 5.2.10 through 5.2.15, 5.4.0 through 5.4.13, 5.6.0 through 5.6.14, 6.0.0 through 6.0.12, 6.2.0 through 6.2.7, 6.4.0 through 6.4.4; and FortiProxy 1.2.0 through 1.2.9, 2.0.0 through 2.0.1 may allow a remote unauthenticated attacker to...

Cross site scripting

Failure to sanitize input in the SSL VPN web portal of FortiOS 5.2.10 through 5.2.15, 5.4.0 through 5.4.13, 5.6.0 through 5.6.14, 6.0.0 through 6.0.12, 6.2.0 through 6.2.7, 6.4.0 through 6.4.4; and FortiProxy 1.2.0 through 1.2.9, 2.0.0 through 2.0.1 may allow a remote unauthenticated attacker to...

Updated epiphany packages fix security vulnerability

XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS payload page often enough to place that page on the Most Visited list CVE-2021-45085. XSS can occur in GNOME Web aka Epiphany before 40.4 a...

Cross-site Scripting (XSS)

epiphany is vulnerable to cross-site scripting. The vulnerability exists via error page...

CVE-2021-45088

XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an error page...

DEBIAN-CVE-2021-45088

XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an error page...

Cross site scripting

XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an error page...

CVE-2021-45088

XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an error page...

UBUNTU-CVE-2021-45088

XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an error page...

CVE-2021-45088

XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an error page...

CVE-2021-45088

XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an error page...

CVE-2021-45088

XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an error page...

Judge.me : Error Page Content Spoofing or Text Injection

Content spoofing, also referred to as content injection, "arbitrary text injection" or virtual defacement, is an attack targeting a user made possible by an injection vulnerability in a web application. When an application does not properly handle user-supplied data, an attacker can supply conten...

WordPress Redirect 404 Error Page to Homepage or Custom Page with Logs plugin <= 1.7.8 - Log Deletion via Cross-Site Request Forgery (CSRF) vulnerability

Log Deletion via Cross-Site Request Forgery CSRF vulnerability discovered by apple502j in WordPress Redirect 404 Error Page to Homepage or Custom Page with Logs plugin versions = 1.7.8. Solution Update the WordPress Redirect 404 Error Page to Homepage or Custom Page with Logs plugin to the latest...