Lucene search
+L

563 matches found

Positive Technologies
Positive Technologies
added 2024/04/15 12:0 a.m.6 views

PT-2024-24177 · Unknown · Cosmetics/Beauty Product Online Store

Name of the Vulnerable Software and Affected Versions: Cosmetics and Beauty Product Online Store version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter. This enables attackers...

6.1CVSS5.9AI score0.00435EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2024/04/15 12:0 a.m.14 views

CVE-2024-31651

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter...

6.2AI score0.00435EPSS
SaveExploits1References1
OSV
OSV
added 2024/04/11 8:15 p.m.7 views

CVE-2024-22717

Cross Site Scripting XSS vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the application...

6.1CVSS6AI score0.0037EPSS
SaveExploits1References1
NVD
NVD
added 2024/04/11 8:15 p.m.15 views

CVE-2024-22717

Cross Site Scripting XSS vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the application...

6.1CVSS5.9AI score0.0037EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/04/11 12:0 a.m.6 views

Form Tools 安全漏洞

Form Tools is an open source codebase for Form Tools scripts, modules, themes and APIs. A security vulnerability exists in Form Tools version 3.1.1, which stems from a cross-site scripting XSS vulnerability in the First Name field...

6.1CVSS5.7AI score0.0037EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/04/11 12:0 a.m.8 views

PT-2024-19536 · Unknown · Form Tools

Name of the Vulnerable Software and Affected Versions: Form Tools version 3.1.1 Description: A Cross Site Scripting XSS issue allows attackers to run arbitrary code via the First Name field in the application. This enables attackers to execute malicious scripts on the client-side, potentially...

6.1CVSS7.2AI score0.0037EPSS
SaveExploits1References4
OSV
OSV
added 2024/03/28 7:15 p.m.9 views

CVE-2024-31064

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...

6.1CVSS6.1AI score0.00656EPSS
SaveExploits1References4
NVD
NVD
added 2024/03/28 7:15 p.m.15 views

CVE-2024-31064

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...

6.1CVSS7AI score0.00656EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2024/03/28 7:15 p.m.5 views

CVE-2024-31064

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...

6.1CVSS6.3AI score0.00656EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/03/28 12:0 a.m.14 views

PT-2024-23744

Name of the Vulnerable Software and Affected Versions Insurance Mangement System versions 1.0.0 and earlier Description The issue allows a remote attacker to execute arbitrary code via the First Name input field. This is a Cross Site Scripting vulnerability. Recommendations For versions 1.0.0 and...

6.1CVSS6.4AI score0.00656EPSS
SaveExploits1References10
Cvelist
Cvelist
added 2024/03/28 12:0 a.m.33 views

CVE-2024-31064

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...

7.2AI score0.00656EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/03/28 12:0 a.m.7 views

Insurance Management System 安全漏洞

Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System v.1.0.0 and prior versions, which stems from a cross-site scripting XSS vulnerability in the First Name field...

6.1CVSS5.7AI score0.00656EPSS
SaveExploits1References5
CVE
CVE
added 2024/03/28 12:0 a.m.74 views

CVE-2024-31064

CVE-2024-31064 affects Insurance Mangement System (version 1.0.0 and earlier). The vulnerability is a Cross Site Scripting (XSS) flaw in the First Name input field that enables a remote attacker to execute arbitrary code. The root cause is unsanitized input in the First Name field leading to scri...

6.1CVSS7.3AI score0.00656EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2024/01/31 3:18 p.m.72 views

BIT-LIFERAY-2023-33943

Cross-site scripting XSS vulnerability in the Account module in Liferay Portal 7.4.3.21 through 7.4.3.62, and Liferay DXP 7.4 update 21 through 62 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a user's 1 First Name, 2 Middle Name, 3 Last Name, ...

5.4CVSS5.2AI score0.00446EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/01/30 12:0 a.m.14 views

PT-2024-16132 · Sourcecodester · Sourcecodester Facebook News Feed Like

Name of the Vulnerable Software and Affected Versions: SourceCodester Facebook News Feed Like version 1.0 Description: A problematic issue has been found, affecting the New Account Handler component. The manipulation of the First Name/Last Name argument with the input alert1 leads to cross-site...

6.1CVSS4.3AI score0.00312EPSS
SaveExploits0References3
OSV
OSV
added 2024/01/07 6:15 a.m.4 views

CVE-2024-0266

A vulnerability classified as problematic has been found in Project Worlds Online Lawyer Management System 1.0. Affected is an unknown function of the component User Registration. The manipulation of the argument First Name leads to cross site scripting. It is possible to launch the attack...

5.4CVSS3.9AI score0.00683EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/01/07 12:0 a.m.10 views

Online Lawyer Management System 跨站脚本漏洞

Online Lawyer Management System is an online lawyer management system. Online Lawyer Management System version 1.0 suffers from a cross-site scripting vulnerability, which stems from the lack of effective filtering and escaping of user-supplied data in the parameter First Name in the component Us...

5.4CVSS6.2AI score0.00683EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/01/06 12:0 a.m.18 views

PT-2024-15426 · Unknown · Project Worlds Online Lawyer Management System

Name of the Vulnerable Software and Affected Versions: Project Worlds Online Lawyer Management System version 1.0 Description: A vulnerability has been found in the User Registration component of the system. The manipulation of the First Name argument leads to cross-site scripting. It is possible...

5.4CVSS6.6AI score0.00683EPSS
SaveExploits1References7
OSV
OSV
added 2023/12/30 12:15 p.m.8 views

CVE-2023-7173

A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file registration.php. The manipulation of the argument First Name leads to cross site scripting. It is possible to initiate the attack remotely. The...

5.4CVSS4AI score0.0146EPSS
SaveExploits2References4
CNNVD
CNNVD
added 2023/12/30 12:0 a.m.6 views

PHPGurukul Hospital Management System Cross-Site Scripting Vulnerability

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. A cross-site scripting vulnerability exists in PHPGurukul Hospital Management System version 1.0, which stems from the parameter First Name in the file registration.php that can lead to cross-site scripting...

5.4CVSS5.8AI score0.0146EPSS
SaveExploits2References4
Rows per page
Query Builder