CVE-2022-27884

Maccms v10 was discovered to contain a reflected cross-site scripting XSS vulnerability in /admin.php/admin/plog/index.html via the wd parameter...

CVE-2022-27886

Maccms v10 was discovered to contain a reflected cross-site scripting XSS vulnerability in /admin.php/admin/ulog/index.html via the wd parameter...

CVE-2022-27886

Maccms v10 contains a reflected XSS in /admin.php/admin/ulog/index.html via the wd parameter. The issue is reported across multiple sources (CVE-2022-27886) and is confirmed in Red Hat/CNVD/CVE listings, describing a JavaScript-injection style vulnerability that could be triggered by user-supplie...

CVE-2022-27886

Maccms v10 was discovered to contain a reflected cross-site scripting XSS vulnerability in /admin.php/admin/ulog/index.html via the wd parameter...

CVE-2022-27884

Maccms v10 was discovered to contain a reflected cross-site scripting XSS vulnerability in /admin.php/admin/plog/index.html via the wd parameter...

CVE-2022-27884

CVE-2022-27884 affects Maccms v10 and is a reflected cross-site scripting (XSS) vulnerability in the admin interface, specifically in /admin.php/admin/plog/index.html via the wd parameter. The root cause is insufficient input validation/escaping of user-supplied data in that parameter, enabling i...

CVE-2022-27884: Improper Neutralization of Input During Web Page Generation

Maccms v10 was discovered to contain a reflected cross-site scripting XSS vulnerability in /admin.php/admin/plog/index.html via the wd parameter...

PT-2022-18665

Name of the Vulnerable Software and Affected Versions Maccms version 10 Description A reflected cross-site scripting XSS issue was found in the /admin.php/admin/plog/index.html endpoint via the wd parameter. This allows for potential malicious script injection and execution. Recommendations For...

CVE-2022-27886: Improper Neutralization of Input During Web Page Generation

Maccms v10 was discovered to contain a reflected cross-site scripting XSS vulnerability in /admin.php/admin/ulog/index.html via the wd parameter...

PT-2022-18667

Name of the Vulnerable Software and Affected Versions Maccms version 10 Description A reflected cross-site scripting XSS issue was found in the /admin.php/admin/ulog/index.html endpoint via the wd parameter. This allows for potential malicious script execution. Recommendations For Maccms version...

httpd security update

2.4.6-97.0.5.5 - modsession: save one aprstrtok Orabug: 33338149CVE-2021-26690 - replace index.html with Oracle's index page oracleindex.html 2.4.6-97.5 - Resolves: 2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier...

httpd:2.4 security update

httpd 2.4.37-43.1.0.1 - scoreboard: fix null pointer deference Orabug: 33690670CVE-2021-34798 - fix apescapequote logic Orabug: 33690686CVE-2021-39275 - Set vstring per ORACLESUPPORTPRODUCT Orabug: 29892262 - Replace index.html with Oracle's index page oracleindex.html. 2.4.37-43.1 - Resolves:...

CVE-2021-44829

Cross Site Scripting XSS vulnerability exists in index.html in AFI WebACMS through 2.1.0 via the the ID parameter...

Cross site scripting

Cross Site Scripting XSS vulnerability exists in index.html in AFI WebACMS through 2.1.0 via the the ID parameter...

CVE-2021-44829

CVE-2021-44829 applies to AFI Solutions WebACMS (Product: WebACMS, Vendor: AFI Solutions GmbH) up to version 2.1.0. The vulnerability is a Cross-Site Scripting (CWE-79) present in index.html exposed via the ID parameter. Root cause is input data not properly sanitized, enabling execution of clien...

PT-2022-12238

Name of the Vulnerable Software and Affected Versions AFI WebACMS versions through 2.1.0 Description A Cross Site Scripting XSS issue exists in the index.html file of AFI WebACMS via the ID parameter. This allows for potential malicious script execution. Recommendations For versions through 2.1.0...

CVE-2021-44829: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in index.html in AFI WebACMS through 2.1.0 via the the ID parameter...

PT-2022-7175

Name of the Vulnerable Software and Affected Versions SysAid versions prior to 22.1.64 SysAid versions prior to 22.2.20 Description The issue is related to an incorrect restriction of a directory path with limited access in the /lib/tinymce/examples/index.html component of the SysAid software. Th...

httpd security update

2.4.6-97.0.1.1 - replace index.html with Oracle's index page oracleindex.html 2.4.6-97.1 - Resolves: 2011729 - CVE-2021-40438 httpd: modproxy: SSRF via a crafted request uri-path containing 'unix:'...

httpd:2.4 security update

httpd 2.4.37-39.1.0.1.1 - Set vstring per ORACLESUPPORTPRODUCT Orabug: 29892262 - Replace index.html with Oracle's index page oracleindex.html 2.4.37-39.1 - Resolves: 2007234 - CVE-2021-40438 httpd:2.4/httpd: modproxy: SSRF via a crafted request uri-path - Resolves: 2007646 - CVE-2021-26691...