13433 matches found
SUSE CVE-2007-6100
Cross-site scripting XSS vulnerability in libraries/auth/cookie.auth.lib.php in phpMyAdmin before 2.11.2.2, when logins are authenticated with the cookie authtype, allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter to index.php, a different vulnerability...
CVE-2021-33396
Cross Site Request Forgery CSRF vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php...
CVE-2021-33396
Cross Site Request Forgery CSRF vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php...
CVE-2021-33396
The CVE-2021-33396 entry describes a CSRF vulnerability in BaijiaCMS 4.1.4 that allows an attacker to change the password or other data of an arbitrary account via index.php. The root cause is CSRF in the account-management flow; impact is high for integrity (unauthorized changes) with no confide...
CVE-2021-33396: Cross-Site Request Forgery (CSRF)
Cross Site Request Forgery CSRF vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php...
PT-2023-12212
Name of the Vulnerable Software and Affected Versions baijiacms version 4.1.4 Description The issue allows attackers to change the password or other information of an arbitrary account via "index.php". This is a Cross Site Request Forgery CSRF vulnerability, which occurs when an attacker can tric...
PT-2023-11576
Name of the Vulnerable Software and Affected Versions UQCMS version 2.1.3 Description The issue allows attackers to execute arbitrary commands via the cookie cart parameter to the "/index.php/cart/num" API endpoint. This is due to a SQL Injection vulnerability in the file...
CVE-2023-24648
Zstore v6.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /index.php...
Cross site scripting
Zstore v6.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /index.php...
CVE-2023-24648
Zstore v6.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /index.php...
CVE-2023-24648
Zstore v6.6.0 has an XSS vulnerability in the component /index.php. The issue is described as CVSS v3.1 base score 6.1 (Medium) with Network attack vector, low confidentiality/integrity impact, no availability impact; user interaction required. The vulnerability is tied to the /index.php entry po...
CVE-2023-24648
Zstore v6.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /index.php...
CVE-2023-24648: Improper Neutralization of Input During Web Page Generation
Zstore v6.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /index.php...
PT-2023-19723
Name of the Vulnerable Software and Affected Versions Zstore version 6.6.0 Description A cross-site scripting XSS issue was found in the /index.php component. This allows for potential malicious script execution. Recommendations For Zstore version 6.6.0, update to a newer version that contains a...
CVE-2023-24648
Zstore v6.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /index.php...
Online Food Ordering System index.php Cross-Site Scripting Vulnerability
Online Food Ordering System is an online food ordering system. A cross-site scripting vulnerability exists in Online Food Ordering System, which is caused by a lack of effective filtering and escaping of user-supplied data in the page parameter of index.php page, which can be exploited by attacke...
CVE-2015-10074 OpenSeaMap online_chart index.php init cross site scripting
A vulnerability was found in OpenSeaMap onlinechart 1.2. It has been classified as problematic. Affected is the function init of the file index.php. The manipulation of the argument mtext leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version staging is...
CVE-2015-10074
A vulnerability was found in OpenSeaMap onlinechart 1.2. It has been classified as problematic. Affected is the function init of the file index.php. The manipulation of the argument mtext leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version staging is...
CVE-2015-10074: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in OpenSeaMap onlinechart 1.2. It has been classified as problematic. Affected is the function init of the file index.php. The manipulation of the argument mtext leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version staging is...