Cross-site Scripting in teampass

Teampass 2.1.26 allows reflected XSS via the index.php PATHINFO. Someone must open a link for the Teampass Password Manager index page containing malicious payload...

GHSA-M2WV-M5PF-284R Cross-site Scripting in teampass

Teampass 2.1.26 allows reflected XSS via the index.php PATHINFO. Someone must open a link for the Teampass Password Manager index page containing malicious payload...

CVE-2021-45866: Improper Neutralization of Input During Web Page Generation

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php...

CVE-2021-44082: Improper Neutralization of Input During Web Page Generation

textpattern 4.8.7 is vulnerable to Cross Site Scripting XSS via /textpattern/index.php,Body. A remote and unauthenticated attacker can use XSS to trigger remote code execution by uploading a webshell. To do so they must first steal the CSRF token before submitting a file upload request...

PT-2022-12445

Name of the Vulnerable Software and Affected Versions Sourcecodester Student Attendance Management System version 1.0 Description A Stored Cross Site Scripting XSS issue exists via the couse field in the "index.php" endpoint. This allows for malicious script execution. Recommendations For...

PT-2022-11978

Name of the Vulnerable Software and Affected Versions textpattern version 4.8.7 Description The issue allows a remote and unauthenticated attacker to trigger remote code execution by uploading a webshell via Cross Site Scripting XSS in the "/textpattern/index.php" endpoint, specifically in the Bo...

CVE-2022-26980

Teampass 2.1.26 allows reflected XSS via the index.php PATHINFO...

CVE-2022-26980

Teampass 2.1.26 allows reflected XSS via the index.php PATHINFO...

CVE-2022-26980

Teampass 2.1.26 allows reflected XSS via the index.php PATHINFO...

CVE-2022-26980

CVE-2022-26980 affects Teampass 2.1.26 and is described as a reflected XSS vulnerability via the index.php PATH_INFO. The linked sources corroborate a reflected XSS issue but do not provide an official patch version or remediation in the supplied documents. Documented CVSS scores from NVD (2.0/3....

CVE-2022-26980

Teampass 2.1.26 allows reflected XSS via the index.php PATHINFO...

PT-2022-18159

Name of the Vulnerable Software and Affected Versions Teampass version 2.1.26 Description The issue allows for reflected XSS via the "index.php" PATH INFO. This can be exploited when someone opens a link to the Teampass Password Manager index page that contains a malicious payload. Recommendation...

CVE-2022-26980: Improper Neutralization of Input During Web Page Generation

Teampass 2.1.26 allows reflected XSS via the index.php PATHINFO...

Sql injection

An issue was discovered in ApiManager 1.1. there is sql injection vulnerability that can use in /index.php?act=api&tag=8...

CVE-2021-43700

An issue was discovered in ApiManager 1.1. there is sql injection vulnerability that can use in /index.php?act=api&tag=8...

CVE-2021-43700: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in ApiManager 1.1. there is sql injection vulnerability that can use in /index.php?act=api&tag=8...

PT-2022-11886

Name of the Vulnerable Software and Affected Versions ApiManager version 1.1 Description An issue was discovered in ApiManager, which is a sql injection vulnerability. This vulnerability can be exploited through the "/index.php?act=api&tag=8" API endpoint. Recommendations For ApiManager version...

CVE-2021-42194

The wechatreturn function in /controller/Index.php of EyouCms V1.5.4-UTF8-SP3 passes the user's input directly into the simplexml load String function, which itself does not prohibit external entities, triggering a XML external entity XXE injection vulnerability...

CVE-2022-25481: Exposure of Resource to Wrong Sphere

ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php. NOTE: this is disputed by a third party because system environment exposure is an intended feature of the debugging mode...

CVE-2022-25481

ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php. NOTE: this is disputed by a third party because system environment exposure is an intended feature of the debugging mode...