StudyMD 0.3.2 - Persistent Cross-Site Scripting

Exploit Title: StudyMD 0.3.2 - Persistent Cross-Site Scripting Exploit Author: TaurusOmar Date: 04/05/2021 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Risk: High 8.8 Vendor Homepage: https://github.com/jotron/StudyMD Version: 0.3.2 Tested on: Windows, Linux, MacOs Software Description: A cool ap...

Pororo's Flashcard - External URLs, Unsafe deleting, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application Pororo's Flashcard published at the 'play' market has multiple vulnerabilities...

FlashCard 2.6.5 'id' Parameter Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/39648/info FlashCard is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

FlashCard 'cPlayer.php' Cross-Site Scripting Vulnerability

FlashCard is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-1872

CVE-2010-1872 is a documented XSS vulnerability in FlashCard’s cPlayer.php affecting versions 2.6.5 and 3.0.1. The flaw allows remote attackers to inject arbitrary script/HTML via the id parameter. The core impact is cross-site scripting with partial integrity impact as per the CVSSv2 base score ...

CVE-2010-1872: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cPlayer.php in FlashCard 2.6.5 and 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information...

FlashCard XSS Vulnerability

Exploit for php platform in category web applications =========================== FlashCard XSS Vulnerability =========================== :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = FlashCard XSS Vulnerability Auth...

Flashcard 2.6.5 Cross Site Scripting

Exploit Title: FlashCard XSS Vulnerability Date: 22.04.2010 Author: Valentin Category: webapps/0day Version: Only tested with 2.6.5, other versions may also be affected Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information...

FlashCard 2.6.5 - 'id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/39648/info FlashCard is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

FlashCard 2.6.5 - id Cross-Site Scripting

FlashCard 2.6.5 - id Cross-Site Scripting source: https://www.securityfocus.com/bid/39648/info FlashCard is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the brows...