675 matches found
CVE-2020-21088
Cross Site Scripting XSS in X2engine X2CRM v7.1 and older allows remote attackers to obtain sensitive information by injecting arbitrary web script or HTML via the "First Name" and "Last Name" fields in "/index.php/contacts/create page"...
CVE-2020-21088: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in X2engine X2CRM v7.1 and older allows remote attackers to obtain sensitive information by injecting arbitrary web script or HTML via the "First Name" and "Last Name" fields in "/index.php/contacts/create page"...
CVE-2021-30044
Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...
CVE-2021-30044
Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...
Cross site scripting
Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...
CVE-2021-30044: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...
CVE-2020-35328
Courier Management System 1.0 - 'First Name' Stored XSS...
CVE-2020-35328
Courier Management System 1.0 - 'First Name' Stored XSS...
CVE-2020-35328
CVE-2020-35328 affects the Courier Management System 1.0. A stored cross-site scripting (XSS) vulnerability is reported in the First Name field of the application. Public references include an Exploit-DB entry, indicating exploitation awareness, but the provided documents do not give explicit exp...
CVE-2020-35328: Improper Neutralization of Input During Web Page Generation
Courier Management System 1.0 - 'First Name' Stored XSS...
Courier Management System 跨站脚本漏洞
SourceCodester Courier Management System is an application program of SourceCodester. The system provides management functions. A cross-site scripting vulnerability exists in Courier Management System 1.0 that originates in the First Name field...
Monica cross-site scripting vulnerability (CNVD-2021-12658)
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the First Name field...
CVE-2021-27368
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...
CVE-2021-27368
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...
Cross site scripting
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...
CVE-2021-27368
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...
Monica 跨站脚本漏洞
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the First Name field...
CVE-2021-27368: Improper Neutralization of Input During Web Page Generation
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...
Glovo: Server Side Template Injection on Name parameter during Sign Up process
Summary: Server-side template injection is when an attacker is able to use native template syntax to inject a malicious payload into a template, which is then executed server-side. In this scenario, when an attacker signs up on the platform and uses a payload in the First Name field, the payload ...