136 matches found
CVE-2013-2622: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS in UebiMiau 2.7.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the "selectedtheme" parameter in error.php...
CVE-2012-1001: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 content parameter to includes/ajax.php or 2 body parameter to includes/error.php...
CVE-2019-14471
TestLink 1.9.19 has XSS via the error.php message parameter...
Code injection
TestLink 1.9.19 has XSS via the error.php message parameter...
CVE-2019-14471
CVE-2019-14471 affects TestLink 1.9.19 and is a cross-site scripting (XSS) vulnerability via the error.php message parameter. Public data in the connected documents confirms the affected software/version and the root cause as improper handling of the error message leading to script injection. CVS...
CVE-2019-14471
TestLink 1.9.19 has XSS via the error.php message parameter...
CVE-2019-14471: Improper Neutralization of Input During Web Page Generation
TestLink 1.9.19 has XSS via the error.php message parameter...
CVE-2018-19189
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in an error.php echo statement...
CVE-2018-19190
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the error.php errormsg parameter...
CVE-2018-19189: Improper Neutralization of Input During Web Page Generation
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in an error.php echo statement...
CVE-2018-19190: Improper Neutralization of Input During Web Page Generation
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the error.php errormsg parameter...
drfrostmaths.com XSS vulnerability
Open Bug Bounty ID: OBB-650561 Description| Value ---|--- Affected Website:| drfrostmaths.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-7776
The vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. System information is returned to the attacker that contains sensitive data...
CVE-2018-7776
The vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. System information is returned to the attacker that contains sensitive data...
Design/Logic Flaw
The vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. System information is returned to the attacker that contains sensitive data...
CVE-2018-7776: Exposure of Sensitive Information to an Unauthorized Actor
The vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. System information is returned to the attacker that contains sensitive data...
CVE-2018-10307
ILIAS LMS vulnerability CVE-2018-10307 affects ILIAS 5.2.x through 5.3.x before 5.3.4. The issue is an XSS in error.php triggered by the text of a PDO exception, allowing injection of arbitrary web script/HTML. Impact is user-exposed XSS; exploitation details are not provided beyond the injection...
CVE-2018-10307: Improper Neutralization of Input During Web Page Generation
error.php in ILIAS 5.2.x through 5.3.x before 5.3.4 allows XSS via the text of a PDO exception...
udllibros.com XSS vulnerability
Open Bug Bounty ID: OBB-607395 Description| Value ---|--- Affected Website:| udllibros.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-7251
An issue was discovered in config/error.php in Anchor 0.12.3. The error log is exposed at an errors.log URI, and contains MySQL credentials if a MySQL error such as "Too many connections" has occurred...