1579 matches found
DBHcms Cross-Site Scripting Vulnerability (CNVD-2020-49084)
DBHcms is a small, free and open source content management system for personal and small business websites. DBHcms 1.2.0 suffers from a stored cross-site scripting vulnerability. The vulnerability stems from the absence of a security filter for the $GET'dbhcmspid' variable in dbhcmspage.php on li...
CVE-2020-13819
Extreme EAC Appliance 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request...
CVE-2020-11583
A GET-based XSS reflected vulnerability in Plesk Obsidian 18.0.17 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter...
CVE-2020-11584
A GET-based XSS reflected vulnerability in Plesk Onyx 17.8.11 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter...
CVE-2020-11583
A GET-based XSS reflected vulnerability in Plesk Obsidian 18.0.17 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter...
CVE-2020-11584
A GET-based XSS reflected vulnerability in Plesk Onyx 17.8.11 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter...
Cross site scripting
A GET-based XSS reflected vulnerability in Plesk Obsidian 18.0.17 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter...
CVE-2020-11583
A GET-based XSS reflected vulnerability in Plesk Obsidian 18.0.17 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter...
PT-2020-12700
Name of the Vulnerable Software and Affected Versions Plesk Onyx version 17.8.11 Description A GET-based XSS reflected issue allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter. This enables attackers to execute malicious code on the victim's...
PT-2020-12699
Name of the Vulnerable Software and Affected Versions Plesk Obsidian version 18.0.17 Description A GET-based XSS reflected issue allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter. This enables attackers to execute malicious code on the victim's...
CVE-2020-11583: Improper Neutralization of Input During Web Page Generation
A GET-based XSS reflected vulnerability in Plesk Obsidian 18.0.17 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter...
CVE-2020-11584: Improper Neutralization of Input During Web Page Generation
A GET-based XSS reflected vulnerability in Plesk Onyx 17.8.11 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter...
Zyxel Armor X1 WAP6806 Directory Traversal
Exploit Title: Zyxel Armor X1 WAP6806 - Directory Traversal Date: 2020-06-19 Exploit Author: Rajivarnan R Vendor Homepage: https://www.zyxel.com/ Software http://www.zyxelguard.com/WAP6806.asp Version: V1.00ABAL.6C0 CVE: 2020-14461 Tested on: Linux Mint / Windows 10 Vulnerabilities Discovered Dat...
Cross-site Scripting (XSS)
tileserver-gl is vulnerable to cross-site scripting XSS. The vulnerability exists because the key GET parameter is not escaped properly, allowing an attacker to inject malicious script and get it executed when a user visits the application's main page...
CVE-2020-15500
An issue was discovered in server.js in TileServer GL through 3.0.0. The content of the key GET parameter is reflected unsanitized in an HTTP response for the application's main page, causing reflected XSS...
CVE-2020-15017
NeDi 1.9C is vulnerable to reflected cross-site scripting. The Devices-Config.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in the sta GET parameter...
CVE-2020-15017
NeDi 1.9C is vulnerable to reflected cross-site scripting. The Devices-Config.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in the sta GET parameter...
CVE-2020-15016: Improper Neutralization of Input During Web Page Generation
NeDi 1.9C is vulnerable to reflected cross-site scripting. The Other-Converter.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in the txt GET parameter...
OpenCTI 3.3.1 Cross Site Scripting / Directory Traversal
Exploit Title: OpenCTI 3.3.1 - Directory Traversal Date: 2020-03-05 Exploit Author: Raif Berkay Dincel Vendor Homepage: www.opencti.io/ Software https://github.com/OpenCTI-Platform/opencti/releases/tag/3.3.1 Version: 3.3.1 CVE-ID: N/A Tested on: Linux Mint / Windows 10 Vulnerabilities Discovered...
