Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 23.9.0...

CVE-2023-4982

CVE-2023-4982 is a stored XSS in librenms/librenms prior to 23.9.0. The vulnerability arises from insufficient sanitization/escaping of HTML characters, notably in includes/html/pages/search/fdb.inc.php (per Veracode). Exploitation can lead to cookie theft or user account compromise, or redirecti...

CVE-2023-4981 Cross-site Scripting (XSS) - DOM in librenms/librenms

Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...

CVE-2023-4977

CVE-2023-4977 describes a code injection vulnerability in the LibreNMS project (librenms/librenms) prior to version 23.9.0. The root cause is insufficient sanitization in the search functionality (notably in search.inc.php), which can allow code injection/HTML injection. Multiple connected source...

CVE-2023-4977 Code Injection in librenms/librenms

Code Injection in GitHub repository librenms/librenms prior to 23.9.0...

CVE-2023-4978 Cross-site Scripting (XSS) - DOM in librenms/librenms

Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...

PT-2023-31372 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms versions prior to 23.9.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository librenms/librenms. Recommendations: For versions prior to 23.9.0, update to version 23.9.0 or later ...

CVE-2023-4928

SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1...

Sql injection

SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1...

CVE-2023-4928 SQL Injection in instantsoft/icms2

SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1...

CVE-2023-4928 SQL Injection in instantsoft/icms2

SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1...

CVE-2023-4913

Cross-site Scripting XSS - Reflected in GitHub repository cecilapp/cecil prior to 7.47.1...

Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository cecilapp/cecil prior to 7.47.1...

CVE-2023-4913 Cross-site Scripting (XSS) - Reflected in cecilapp/cecil

Cross-site Scripting XSS - Reflected in GitHub repository cecilapp/cecil prior to 7.47.1...

CVE-2023-4898

Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

Sql injection

SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

CVE-2023-4899 SQL Injection in mintplex-labs/anything-llm

SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

CVE-2023-4899

The CVE-2023-4899 entry concerns a SQL Injection vulnerability in mintplex-labs/anything-llm (versions prior to 0.0.1). The Red Hat/NVD/NVD-derived entries align on the vulnerability class, with the Huntr PoC detailing a concrete flaw in the /api/workspace/:slug endpoint where the slug parameter ...

CVE-2023-4899 SQL Injection in mintplex-labs/anything-llm

SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

CVE-2023-4898 Authentication Bypass by Primary Weakness in mintplex-labs/anything-llm

Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...