52 matches found
Haraj 3.7 - Cross-Site Scripting
Haraj 3.7 contains a cross-site scripting vulnerability in the User Upgrade Form. An attacker can inject malicious script and thus steal authentication credentials and launch other attacks. id: CVE-2022-31299 info: name: Haraj 3.7 - Cross-Site Scripting author: edoardottt severity: medium...
CVE-2022-31298
CVE-2022-31298 Haraj Script 3.7 - 認証済み保存型XSS Exploit Title: Haraj Script 3.7 - 認証済み保存型XSS Date: 2022-06-13 CVE: CVE-2022-31298 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://angtech.org/ Software Link: https://angtech.org/product/view/3...
CVE-2022-31297
CVE-2022-31297 Haraj Script 3.7 - 反射型XSS エクスプロイトタイトル: Haraj Script 3.7 - 反射型XSS 日付: 2022-06-13 CVE: CVE-2022-31297 エクスプロイト作者: Abdulaziz Saad @b4zb0z ベンダーホームページ: https://angtech.org/ ソフトウェアリンク: https://angtech.org/product/view/3 バージョン: 3.7 テスト環境: LAMP, Ubuntu...
CVE-2022-31299
CVE-2022-31299 Haraj Script 3.7 - 反射型XSS エクスプロイトタイトル: Haraj Script 3.7 - 反射型XSS 日付: 2022-06-13 CVE: CVE-2022-31299 エクスプロイト作者: Abdulaziz Saad @b4zb0z ベンダーホームページ: https://angtech.org/ ソフトウェアリンク: https://angtech.org/product/view/3 バージョン: 3.7 テスト環境: LAMP, Ubuntu...
CVE-2022-31300
CVE-2022-31300 Haraj Script 3.7 - DMセクション 認証済みストアドXSS エクスプロイトタイトル: Haraj Script 3.7 - 認証済みストアドXSS 日付: 2022-06-13 CVE: CVE-2022-31300 エクスプロイト作者: Abdulaziz Saad @b4zb0z ベンダーホームページ: https://angtech.org/ ソフトウェアリンク: https://angtech.org/product/view/3 バージョン: 3.7...
CVE-2022-31301
CVE-2022-31301 Haraj Script 3.7 - 広告投稿の認証済み保存型XSS エクスプロイトタイトル: Haraj Script 3.7 - 認証済み保存型XSS 日付: 2022-06-13 CVE: CVE-2022-31301 エクスプロイト作者: Abdulaziz Saad @b4zb0z ベンダーホームページ: https://angtech.org/ ソフトウェアリンク: https://angtech.org/product/view/3 バージョン: 3.7...
CVE-2022-31300
A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...
CVE-2022-31298
A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...
CVE-2022-31301
Haraj v3.7 was discovered to contain a stored cross-site scripting XSS vulnerability in the Post Ads component...
CVE-2022-31299
Haraj v3.7 was discovered to contain a reflected cross-site scripting XSS vulnerability in the User Upgrade Form...
EUVD-2022-52855
Malicious code in bioql PyPI...
EUVD-2022-52856
Malicious code in bioql PyPI...
EUVD-2022-52853
Malicious code in bioql PyPI...
haraj 1.1 Add Administrator
==================================================================================================================================== | Title : haraj V1.1 Add ADmin Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 63.0.3 32-bit | | Vendor :...
haraj-alkharj.com.sa Cross Site Scripting vulnerability OBB-3097590
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Haraj Cross-Site Scripting Vulnerability
A security vulnerability exists in Haraj v3.7, a buying and selling platform from Haraj Saudi Arabia, due to a cross-site scripting issue in the comments section of advertisements. An attacker could exploit the vulnerability to execute arbitrary Web script or HTML via a crafted POST request...
Haraj Cross-Site Scripting Vulnerability (CNVD-2022-66491)
A cross-site scripting vulnerability exists in Haraj v3.7, a buying and selling platform from Haraj Saudi Arabia. The vulnerability stems from a stored cross-site scripting XSS vulnerability contained in the Post Ads component. An attacker could exploit this vulnerability to conduct cross-site...
Haraj has cross-site scripting vulnerability
A cross-site scripting vulnerability exists in Haraj v3.7, a buying and selling platform from Haraj Saudi Arabia. The vulnerability stems from a lack of data validation filtering of user-supplied data and output in some DM components. An attacker could exploit this vulnerability to execute...
