13597 matches found
CVE-2017-6560
XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=XSS&editObjId=XSS attack...
CVE-2017-6561
XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=XSS attack...
CVE-2017-6559
XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif=XSS attack...
CVE-2017-6559
The CVE-2017-6559 entry documents a cross-site scripting (XSS) flaw in Agora-Project 3.2.2. The vulnerable vector is index.php?disconnect=1&msgNotif[]=[XSS], where user-supplied data is reflected into the page without sufficient sanitization. The impact is indicated as low confidentiality and low...
PT-2017-17160
Name of the Vulnerable Software and Affected Versions Agora-Project version 3.2.2 Description The issue is related to a cross-site scripting XSS attack. It affects the index.php file, specifically when the ctrl parameter is set to 'file', the targetObjId parameter is set to 'fileFolder-2', and th...
CVE-2017-6560: Improper Neutralization of Input During Web Page Generation
XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=XSS&editObjId=XSS attack...
PT-2017-17158
Name of the Vulnerable Software and Affected Versions Agora-Project version 3.2.2 Description The issue is related to a cross-site scripting XSS attack. The attack can be performed using the "index.php?ctrl=misc&action=XSS&editObjId=XSS" endpoint, where action and editObjId are vulnerable...
CVE-2017-6561: Improper Neutralization of Input During Web Page Generation
XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=XSS attack...
CVE-2017-6562: Improper Neutralization of Input During Web Page Generation
XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=XSS attack...
CVE-2017-6559: Improper Neutralization of Input During Web Page Generation
XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif=XSS attack...
PT-2017-17157
Name of the Vulnerable Software and Affected Versions Agora-Project version 3.2.2 Description The issue exists in the form of a cross-site scripting XSS attack. This attack can be executed through the index.php endpoint with specific parameters, including disconnect=1 and msgNotif containing...
PT-2017-17159
Name of the Vulnerable Software and Affected Versions Agora-Project version 3.2.2 Description The issue is related to a cross-site scripting XSS attack. It affects the index.php endpoint, specifically when the action parameter is manipulated with malicious input. The action parameter is vulnerabl...
PT-2017-17140
Name of the Vulnerable Software and Affected Versions webpagetest version 3.0 Description A Cross-Site Scripting XSS issue exists due to insufficient filtration of user-supplied data, specifically video data, passed to the "webpagetest-master/www/speedindex/index.php" URL. This allows an attacker...
CVE-2017-6538: Improper Neutralization of Input During Web Page Generation
A Cross-Site Scripting XSS issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data video passed to the webpagetest-master/www/speedindex/index.php URL. An attacker could execute arbitrary HTML and script code in a browser in the conte...
Input validation
andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php...
CVE-2017-6511
andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php...
CVE-2017-6511
andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php...
CVE-2017-6511
andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php...
CVE-2017-6511: Improper Neutralization of Input During Web Page Generation
andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php...