Kashipara Food Management System Cross-Site Scripting Vulnerability

Kashipara Food Management System is a food management system from Kashipara. A cross-site scripting vulnerability exists in version 1.0 of the Kashipara Food Management System, which stems from a lack of effective filtering and escaping of user-supplied data in the parameter tin of the...

PHPJabbers Car Park Booking System Security Vulnerability

PHPJabbers Car Park Booking System is a parking lot booking system by PHPJabbers. A security vulnerability exists in PHPJabbers Car Park Booking System version 3.0, which stems from a stored cross-site scripting and HTML injection vulnerability...

Ubuntu: Security Advisory (USN-6575-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHPJabbers Car Park Booking System 3.0 Cross Site Scripting / HTML Injection

Exploit Title: PHPJabbers Car Park Booking System v3.0 - Multiple Stored XSS Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/car-park-booking/sectionDemo Version: v3.0 Tested on:...

PHPJabbers Event Booking Calendar Security Vulnerability

PHPJabbers Event Booking Calendar is an event calendar application. A security vulnerability exists in PHPJabbers Event Booking Calendar version 4.0, which stems from a stored cross-site scripting and HTML injection vulnerability...

PHPJabbers Restaurant Booking System Security Vulnerability

PHPJabbers Restaurant Booking System is a restaurant booking system from the Serbian company PHPJabbers. A security vulnerability exists in PHPJabbers Restaurant Booking System version 3.0, which stems from reflective and stored cross-site scripting and html injection vulnerabilities...

PHPJabbers Restaurant Booking System Security Vulnerability

PHPJabbers Restaurant Booking System is a restaurant booking system from the Serbian company PHPJabbers. A security vulnerability exists in PHPJabbers Restaurant Booking System version 3.0, which stems from reflective and stored cross-site scripting and html injection vulnerabilities...

PHPJabbers Restaurant Booking System 3.0 Cross Site Scripting / HTML Injection

Exploit Title: PHPJabbers Restaurant Booking System v3.0 - Reflected XSS Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/restaurant-booking-system/sectionDemo Version: v3.0 Tested o...

PHPJabbers Hotel Booking System 4.0 Cross Site Scripting / HTML Injection

Exploit Title: PHPJabbers Hotel Booking System v4.0 - Multiple HTML Injection Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/hotel-booking-system/sectionDemo Version: v4.0 Tested o...

PHPJabbers Event Booking Calendar Security Vulnerability

PHPJabbers Event Booking Calendar is an event calendar application by PHPJabbers. A security vulnerability exists in PHPJabbers Event Booking Calendar version 4.0, which stems from the presence of stored cross-site scripting and HTML injection vulnerabilities...

PHPJabbers Restaurant Booking System Security Vulnerability

PHPJabbers Restaurant Booking System is a restaurant booking system from the Serbian company PHPJabbers. A security vulnerability exists in PHPJabbers Restaurant Booking System version 3.0, which stems from reflective and stored cross-site scripting and html injection vulnerabilities...

Exploit for Cross-site Scripting in Alinto Sogo

CVE-2023-48104 HTML Injection in Alinto/SOGo Web Client Ve...

USN-6575-1: Twisted vulnerabilities

It was discovered that Twisted incorrectly escaped host headers in certain 404 responses. A remote attacker could possibly use this issue to perform HTML and script injection attacks. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. CVE-2022-39348 It was discovered that Twisted...

Formidable Forms < 6.7.1 - HTML Injection

Description The plugin is vulnerable to HTML injection in versions up to, and including, 6.7. This vulnerability allows unauthenticated users to inject arbitrary HTML code into form fields. When the form data is viewed by an administrator in the Entries View Page, the injected HTML code is...

CVE-2023-5770

Proofpoint Enterprise Protection contains a vulnerability in the email delivery agent that allows an unauthenticated attacker to inject improperly encoded HTML into the email body of a message through the email subject. The vulnerability is caused by inappropriate encoding when rewriting the emai...

CVE-2023-5770

Proofpoint Enterprise Protection contains a vulnerability in the email delivery agent that allows an unauthenticated attacker to inject improperly encoded HTML into the email body of a message through the email subject. The vulnerability is caused by inappropriate encoding when rewriting the emai...

CVE-2023-5770 HTML injection in email body through email subject

Proofpoint Enterprise Protection contains a vulnerability in the email delivery agent that allows an unauthenticated attacker to inject improperly encoded HTML into the email body of a message through the email subject. The vulnerability is caused by inappropriate encoding when rewriting the emai...

CVE-2023-5770 HTML injection in email body through email subject

Proofpoint Enterprise Protection contains a vulnerability in the email delivery agent that allows an unauthenticated attacker to inject improperly encoded HTML into the email body of a message through the email subject. The vulnerability is caused by inappropriate encoding when rewriting the emai...

CVE-2023-6830

The Formidable Forms plugin for WordPress is vulnerable to HTML injection in versions up to, and including, 6.7. This vulnerability allows unauthenticated users to inject arbitrary HTML code into form fields. When the form data is viewed by an administrator in the Entries View Page, the injected...

CVE-2023-6830

The Formidable Forms plugin for WordPress is vulnerable to HTML injection in versions up to, and including, 6.7. This vulnerability allows unauthenticated users to inject arbitrary HTML code into form fields. When the form data is viewed by an administrator in the Entries View Page, the injected...