13451 matches found
CVE-2021-40928
Cross-site scripting XSS vulnerability in index.php in FlexTV beta development version allows remote attackers to inject arbitrary web script or HTML via the PHPSELF parameter...
CVE-2021-40924
Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the firstname parameter...
CVE-2021-40924
Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the firstname parameter...
CVE-2021-40923
The CVE-2021-40923 entry describes a Cross-site Scripting (XSS) vulnerability in the Bugs open-source defect tracking system, specifically install/index.php for Bugs 1.8 and earlier. The issue arises from the email parameter, allowing remote attackers to inject arbitrary web script or HTML. Conne...
CVE-2021-40923
Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the email parameter...
CVE-2021-40922
Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the lastname parameter...
CVE-2021-40922
CVE-2021-40922 is a cross-site scripting (XSS) vulnerability affecting the open source defect-tracking system Bugs/Tinyissue in versions 1.8 and earlier, exploitable via the last_name parameter in install/index.php . The root cause is improper input handling in that endpoint, enabling remote atta...
CVE-2021-40922
Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the lastname parameter...
CVE-2021-40922: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the lastname parameter...
CVE-2021-40924: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the firstname parameter...
CVE-2021-40928: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in FlexTV beta development version allows remote attackers to inject arbitrary web script or HTML via the PHPSELF parameter...
PT-2021-23016
Name of the Vulnerable Software and Affected Versions FlexTV beta development version Description The issue is related to a cross-site scripting XSS vulnerability in the index.php file of FlexTV. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the PHP SELF...
PT-2021-23010
Name of the Vulnerable Software and Affected Versions bugs versions 1.8 and below Description The issue is a cross-site scripting XSS vulnerability in the install/index.php file. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the last name parameter...
CVE-2021-40923: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the email parameter...
PT-2021-23011
Name of the Vulnerable Software and Affected Versions bugs versions 1.8 and below Description The issue allows remote attackers to inject arbitrary web script or HTML via the email parameter in the install/index.php file. This enables attackers to perform cross-site scripting XSS attacks...
PT-2021-23012
Name of the Vulnerable Software and Affected Versions bugs versions 1.8 and below Description The issue is a cross-site scripting XSS vulnerability in the install/index.php file. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the first name parameter...
PT-2021-10542
Name of the Vulnerable Software and Affected Versions: UCMS version 1.4.7 Description: A stored cross-site scripting XSS issue in the "/ucms/index.php?do=list edit" endpoint of UCMS allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, descriptio...
UCMS 跨站脚本漏洞
UCMS is a content management system written in PHP. A security vulnerability exists in UCMS, which originates from a stored cross-site scripting XSS vulnerability in ucms index.php. An attacker can exploit this vulnerability to execute client-side code...
CVE-2020-20781: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in /ucms/index.php?do=listedit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, description or content text fields...
