CVE-2022-1715 Account Takeover in neorazorx/facturascripts

Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07...

CVE-2022-1715

Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07...

CVE-2022-1715 Account Takeover in neorazorx/facturascripts

Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07...

Cross-site Scripting (XSS)

facturascripts/facturascripts is vulnerable to reflected cross-site scripting. The vulnerability exists in the privateCore function of EditPageOption.php' due to the lack of sanitization which allows an attacker to inject and execute malicious javascript...

Cross-site Scripting in facturascripts

Reflected cross-site scripting using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.08. This can lead to theft of a user's cookies, which in turn could lead to account takeover or do other malicious activities in a victim's browser...

GHSA-6465-R752-2H8V Cross-site Scripting in facturascripts

Reflected cross-site scripting using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.08. This can lead to theft of a user's cookies, which in turn could lead to account takeover or do other malicious activities in a victim's browser...

PT-2022-14067 · Unknown · Neorazorx/Facturascripts

Name of the Vulnerable Software and Affected Versions: neorazorx/facturascripts versions prior to 2022.07 Description: The issue is related to an Account Takeover in the GitHub repository neorazorx/facturascripts. It is caused by improper type casting. Recommendations: For versions prior to...

CVE-2022-1715: Excessive Attack Surface

Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07...

FacturaScripts 安全漏洞

FacturaScripts is an open source ERP software from Carlos Garcia, an individual developer in Spain. A security vulnerability exists in FacturaScripts versions prior to 2022.07 that stems from an account takeover issue...

CVE-2022-1682

Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account takeover or do any malicious activity in victim's browser...

CVE-2022-1682

Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account takeover or do any malicious activity in victim's browser...

CVE-2022-1682 Reflected Xss using url based payload in neorazorx/facturascripts

Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account takeover or do any malicious activity in victim's browser...

CVE-2022-1682

The CVE-2022-1682 entry describes a reflected cross-site scripting (XSS) vulnerability in FacturaScripts (neorazorx/facturascripts) prior to version 2022.07. The root cause is reflected XSS via URL-based payloads, allowing an attacker to steal cookies and potentially take over user accounts or pe...

CVE-2022-1682

Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account takeover or do any malicious activity in victim's browser...

CVE-2022-1682 Reflected Xss using url based payload in neorazorx/facturascripts

Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account takeover or do any malicious activity in victim's browser...

FacturaScripts 跨站脚本漏洞

FacturaScripts is an ERP software. FacturaScripts versions prior to 2022.07 contain a cross-site scripting vulnerability that could be exploited by attackers to steal a user's cookie, which could lead to account takeover or any malicious activity in the victim's browser...

PT-2022-14040

Name of the Vulnerable Software and Affected Versions neorazorx/facturascripts versions prior to 2022.08 Description The issue is related to reflected cross-site scripting XSS using URL-based payloads. This can lead to the theft of a user's cookies, potentially resulting in account takeover or...

CVE-2022-1682: Improper Neutralization of Input During Web Page Generation

Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account takeover or do any malicious activity in victim's browser...

FacturaScripts Cross-Site Scripting Vulnerability (CNVD-2022-76230)

FacturaScripts is an ERP software. cross-site scripting vulnerability exists in versions prior to FacturaScripts 2022.07, which can be exploited by attackers to execute arbitrary javascript code, steal user cookies, execute HTTP requests, obtain "same-origin " page content, etc...

Cross-site Scripting (XSS)

facturascripts is vulnerable to cross-site scripting. An attacker is able to inject malicious code via model fields, allowing stealing of user's cookie, performing HTTP request and getting content of same origin page, and so on...