CVE-2022-1988 Cross-site Scripting (XSS) - Generic in neorazorx/facturascripts

Cross-site Scripting XSS - Generic in GitHub repository neorazorx/facturascripts prior to 2022.09...

FacturaScripts 跨站脚本漏洞

FacturaScripts is an open source ERP software from the individual developer Carlos Garcia in Spain. A security vulnerability exists in FacturaScripts versions prior to 2022.09, which stems from a cross-site scripting XSS vulnerability in the GitHub repository neorazorx/facturascripts storage...

Refelect XSS in neorazorx/facturascripts

Description /facturascripts/EditCuenta can input the taint data without sanitization by the parameter description Proof of Concept POST /facturascripts/EditCuenta HTTP/1.1 Host: 127.0.0.1 Content-Length: 1115 Cache-Control: max-age=0 sec-ch-ua: "NotA:Brand";v="8", "Chromium";v="101"...

Stored XSS

Description Stored XSS in ListAgenciaTransporte module in facturascripts is triggered when clicking the scrolling middle mouse button. Proof of Concept 1.Create a new non-admin account 2.Login and goto http://localhost/invoices/EditAgenciaTransporte 3.Add new user with website link to...

Privilege Escalation

facturascripts/facturascripts is vulnerable to privilege escalation. The vulnerability exists in the newUserPassword function in AppController.php due to a lack of validation in the password field which allows an unauthorized user to access the user account...

FacturaScripts Cross-Site Scripting Vulnerability () CNVD-2022-77854

FacturaScripts is an ERP software. FacturaScripts versions prior to 2022.07 contain a cross-site scripting vulnerability that could be exploited by attackers to steal a user's cookie, which could lead to account takeover or any malicious activity in the victim's browser...

Account takeover in facturascripts

Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.08 due to improper type casting...

GHSA-VJQ3-X3F2-FVXQ Account takeover in facturascripts

Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.08 due to improper type casting...

CVE-2022-1715

Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07...

CVE-2022-1715

Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07...

CVE-2022-1715 Account Takeover in neorazorx/facturascripts

Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07...

CVE-2022-1715 Account Takeover in neorazorx/facturascripts

Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07...

CVE-2022-1715

CVE-2022-1715 affects the GitHub repository neorazorx/facturascripts; prior to 2022.07, an improper type casting issue enables Account Takeover. Multiple connected sources (GitHub advisories, OSV, RH entries, NVD) confirm the vulnerable component is the FacturaScripts codebase and the root cause ...

Cross-site Scripting (XSS)

facturascripts/facturascripts is vulnerable to reflected cross-site scripting. The vulnerability exists in the privateCore function of EditPageOption.php' due to the lack of sanitization which allows an attacker to inject and execute malicious javascript...

GHSA-6465-R752-2H8V Cross-site Scripting in facturascripts

Reflected cross-site scripting using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.08. This can lead to theft of a user's cookies, which in turn could lead to account takeover or do other malicious activities in a victim's browser...

Cross-site Scripting in facturascripts

Reflected cross-site scripting using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.08. This can lead to theft of a user's cookies, which in turn could lead to account takeover or do other malicious activities in a victim's browser...

FacturaScripts 安全漏洞

FacturaScripts is an open source ERP software from Carlos Garcia, an individual developer in Spain. A security vulnerability exists in FacturaScripts versions prior to 2022.07 that stems from an account takeover issue...

PT-2022-14067 · Unknown · Neorazorx/Facturascripts

Name of the Vulnerable Software and Affected Versions: neorazorx/facturascripts versions prior to 2022.07 Description: The issue is related to an Account Takeover in the GitHub repository neorazorx/facturascripts. It is caused by improper type casting. Recommendations: For versions prior to...

CVE-2022-1682

Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account takeover or do any malicious activity in victim's browser...

CVE-2022-1682

Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account takeover or do any malicious activity in victim's browser...