52 matches found
CVE-2022-31299
CVE-2022-31299 Haraj Script 3.7 - Reflected XSS एक्सप्लॉइट शीर्षक: Haraj Script 3.7 - Reflected XSS तिथि: 2022-06-13 CVE: CVE-2022-31299 एक्सप्लॉइट लेखक: Abdulaziz Saad @b4zb0z विक्रेता होमपेज: https://angtech.org/ सॉफ्टवेयर लिंक: https://angtech.org/product/view/3...
CVE-2022-31300
CVE-2022-31300 Haraj Script 3.7 - قسم الرسائل الخاصة: XSS مخزنة ومصادق عليها عنوان الاستغلال: Haraj Script 3.7 - XSS مخزنة ومصادق عليها التاريخ: 2022-06-13 CVE: CVE-2022-31300 مؤلف الاستغلال: Abdulaziz Saad @b4zb0z الصفحة الرئيسية للبائع: https://angtech.org/ رابط البرنامج:...
CVE-2022-31301
CVE-2022-31301 Haraj Script 3.7 - पोस्ट विज्ञापन प्रमाणित संग्रहीत XSS एक्सप्लॉइट शीर्षक: Haraj Script 3.7 - प्रमाणित संग्रहीत XSS दिनांक: 2022-06-13 CVE: CVE-2022-31301 एक्सप्लॉइट लेखक: Abdulaziz Saad @b4zb0z विक्रेता होमपेज: https://angtech.org/ सॉफ्टवेयर लिंक:...
CVE-2022-31298
CVE-2022-31298 Haraj Script 3.7 - XSS مخزّن موثّق عنوان الاستغلال: Haraj Script 3.7 - XSS مخزّن موثّق التاريخ: 2022-06-13 CVE: CVE-2022-31298 مؤلف الاستغلال: Abdulaziz Saad @b4zb0z الصفحة الرئيسية للبائع: https://angtech.org/ رابط البرنامج: https://angtech.org/product/view/3...
CVE-2022-31297
CVE-2022-31297 Haraj Script 3.7 - Reflected XSS शोषण शीर्षक: Haraj Script 3.7 - Reflected XSS तारीख: 2022-06-13 CVE: CVE-2022-31297 शोषण लेखक: Abdulaziz Saad @b4zb0z विक्रेता होमपेज: https://angtech.org/ सॉफ्टवेयर लिंक: https://angtech.org/product/view/3...
Haraj 3.7 - Cross-Site Scripting
Haraj 3.7 contains a cross-site scripting vulnerability in the User Upgrade Form. An attacker can inject malicious script and thus steal authentication credentials and launch other attacks. id: CVE-2022-31299 info: name: Haraj 3.7 - Cross-Site Scripting author: edoardottt severity: medium...
CVE-2022-31300
A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...
CVE-2022-31298
A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...
CVE-2022-31301
Haraj v3.7 was discovered to contain a stored cross-site scripting XSS vulnerability in the Post Ads component...
CVE-2022-31299
Haraj v3.7 was discovered to contain a reflected cross-site scripting XSS vulnerability in the User Upgrade Form...
EUVD-2022-52856
Malicious code in bioql PyPI...
EUVD-2022-52855
Malicious code in bioql PyPI...
EUVD-2022-52853
Malicious code in bioql PyPI...
haraj 1.1 Add Administrator
==================================================================================================================================== | Title : haraj V1.1 Add ADmin Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 63.0.3 32-bit | | Vendor :...
haraj-alkharj.com.sa Cross Site Scripting vulnerability OBB-3097590
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Haraj Cross-Site Scripting Vulnerability (CNVD-2022-66491)
A cross-site scripting vulnerability exists in Haraj v3.7, a buying and selling platform from Haraj Saudi Arabia. The vulnerability stems from a stored cross-site scripting XSS vulnerability contained in the Post Ads component. An attacker could exploit this vulnerability to conduct cross-site...
Haraj Cross-Site Scripting Vulnerability
A security vulnerability exists in Haraj v3.7, a buying and selling platform from Haraj Saudi Arabia, due to a cross-site scripting issue in the comments section of advertisements. An attacker could exploit the vulnerability to execute arbitrary Web script or HTML via a crafted POST request...
Haraj has cross-site scripting vulnerability
A cross-site scripting vulnerability exists in Haraj v3.7, a buying and selling platform from Haraj Saudi Arabia. The vulnerability stems from a lack of data validation filtering of user-supplied data and output in some DM components. An attacker could exploit this vulnerability to execute...
