70 matches found
Cross site scripting
Stored cross-site scripting vulnerability in Exment PHP8 exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, PHP7 exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier allows a remote authenticated attacker to inject an arbitrary script...
CVE-2022-38089
Stored cross-site scripting vulnerability in Exment PHP8 exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, PHP7 exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier allows a remote authenticated attacker to inject an arbitrary script...
CVE-2022-38089
CVE-2022-38089 describes a stored cross-site scripting (XSS) vulnerability in Exment and the exceedone/laravel-admin integration. The issue affects PHP8: exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier; PHP7: exceedone/exment v4.4.2 and earlier and exceedone/lar...
CVE-2022-38089
Stored cross-site scripting vulnerability in Exment PHP8 exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, PHP7 exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier allows a remote authenticated attacker to inject an arbitrary script...
CVE-2022-38080
Reflected cross-site scripting vulnerability in Exment PHP8 exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, PHP7 exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier allows a remote authenticated attacker to inject an arbitrary...
CVE-2022-38080
The CVE-2022-38080 issue is a reflected cross-site scripting vulnerability in Exment and related Exment/laravel-admin components. Affected versions include Exment v5.0.2 and earlier (PHP8) and v4.4.2 and earlier (PHP7), plus corresponding laravel-admin builds (v3.0.0 and earlier; v2.2.2 and earli...
CVE-2022-37333
SQL injection vulnerability in the Exment PHP8 exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, PHP7 exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier allows remote authenticated attackers to execute arbitrary SQL commands...
CVE-2022-37333
CVE-2022-37333 is a SQL injection vulnerability in Exment and related laravel-admin components. The issue affects PHP8: exceedone/exment e5.0.2 and earlier and exceedone/laravel-admin e3.0.0 and earlier; PHP7: exceedone/exment e4.4.2 and earlier and exceedone/laravel-admin e2.2.2 and earlier. The...
CVE-2022-37333
SQL injection vulnerability in the Exment PHP8 exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, PHP7 exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier allows remote authenticated attackers to execute arbitrary SQL commands...
Multiple vulnerabilities in Exment
Overview Exment provided by Kajitori Co.,Ltd contains multiple vulnerabilities listed below. Reflected cross-site scripting CWE-79 - CVE-2022-38080 SQL injection CWE-89 - CVE-2022-37333 Stored cross-site scripting CWE-79 - CVE-2022-38089 CVE-2022-38080, CVE-2022-37333 Hibiki Moriyama of STNet,...
Exment SQL注入漏洞
Exment is simple, easy, lightweight and free web database. A security vulnerability exists in Exment PHP8 v5.0.2 and earlier, laravel-admin v3.0.0 and earlier, and exment PHP7 v4.4.2 and earlier, which can be exploited by attackers to execute arbitrary SQL commands...
Exment 跨站脚本漏洞
Exment is simple, easy, lightweight and free web database. A cross-site scripting vulnerability exists in Exment PHP8 v5.0.2 and earlier, laravel-admin v3.0.0 and earlier, and exment PHP7 v4.4.2 and earlier, which can be exploited by an attacker to inject arbitrary scripts...
Exment 跨站脚本漏洞
Exment is simple, easy, lightweight and free web database. A security vulnerability exists in Exment PHP8 v5.0.2 and earlier, laravel-admin v3.0.0 and earlier, and exment PHP7 v4.4.2 and earlier, which can be exploited by attackers to inject arbitrary scripts...
JVN#46239102: Multiple vulnerabilities in Exment
Exment provided by Kajitori Co.,Ltd contains multiple vulnerabilities listed below. Reflected cross-site scripting CWE-79 - CVE-2022-38080 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N| Base Score: 5.4 CVSS v2| AV:N/AC:H/Au:S/C:N/I:P/A:N| Base Score: 2.1...
PT-2022-24191 · Exceedone · Exment +1
Name of the Vulnerable Software and Affected Versions: exceedone/exment versions 5.0.2 and earlier exceedone/exment versions 4.4.2 and earlier exceedone/laravel-admin versions 3.0.0 and earlier exceedone/laravel-admin versions 2.2.2 and earlier Description: A reflected cross-site scripting issue...
PT-2022-4656 · Exceedone · Exment +1
Name of the Vulnerable Software and Affected Versions: exceedone/exment versions 5.0.2 and earlier exceedone/exment versions 4.4.2 and earlier exceedone/laravel-admin versions 3.0.0 and earlier exceedone/laravel-admin versions 2.2.2 and earlier Description: The issue is related to a SQL injection...
PT-2022-24195 · Exceedone · Exment +1
Name of the Vulnerable Software and Affected Versions: exceedone/exment versions 5.0.2 and earlier exceedone/laravel-admin versions 3.0.0 and earlier exceedone/exment versions 4.4.2 and earlier exceedone/laravel-admin versions 2.2.2 and earlier Description: A stored cross-site scripting issue...
Exment Cross-Site Scripting Vulnerability
Exment is a Japanese free data management Web system with a simple structure, pre-existing business templates, and links to multiple types of data to minimize the trouble of searching. It supports windows, mac and linux systems. A cross-site scripting vulnerability exists in Exment v3.6.0 and pri...
