6643 matches found
CVE-2025-55124
Improper neutralisation of input in Revive Adserver 6.0.0+ causes a reflected XSS attack in the banner-zone.php script...
CVE-2025-55123
Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be able to craft XSS attacks to their own advertiser users...
CVE-2025-55123
Revive Adserver CVE-2025-55123 presents a cross-site scripting vulnerability caused by improper input neutralization. The issue affects Revive Adserver versions 5.5.2 and earlier, 6.0.1 and earlier (as cited across multiple sources). The confirmed vector is a stored XSS in the Banner Name field, ...
CVE-2025-55124
CVE-2025-55124 affects Revive Adserver 6.0.0+ via a reflected XSS in banner-zone.php. The vulnerability arises from improper neutralisation of input, allowing attacker-supplied scripts to be echoed in the admin interface when using the banner creation/“Linked Zones” workflow (banner-zone.php). Th...
CVE-2025-0643
Pyxis Signage (Narkom Pyxis Signage) is affected by CVE-2025-0643 due to improper neutralization of input during web page generation, enabling stored XSS. Affected: Pyxis Signage up to 31012025. Impact notes from sources indicate High severity with full Impact on confidentiality, integrity, and a...
PT-2025-47622
Name of the Vulnerable Software and Affected Versions Revive Adserver versions 5.5.2 and earlier Revive Adserver versions 6.0.1 and earlier Description A flaw exists in Revive Adserver that allows manager accounts to create Cross-Site Scripting XSS attacks targeting their advertiser users due to...
PT-2025-47572
Name of the Vulnerable Software and Affected Versions Pyxis Signage versions through 31012025 Description Pyxis Signage contains a flaw related to improper input handling during web page generation, potentially leading to Stored Cross-site Scripting XSS. This allows for the injection of malicious...
PT-2025-47615
Improper Neutralization of Input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes a potential reflected XSS attack...
PT-2025-47457
Name of the Vulnerable Software and Affected Versions StarCities versions prior to 1.1.61 Description StarCities is subject to Reflected Cross-site Scripting XSS, a condition where improper neutralization of input during web page generation allows an attacker to execute malicious scripts in the...
Saysis Starcities 跨站脚本漏洞
Saysis Starcities is an application from the Turkish company Saysis. A cross-site scripting vulnerability exists in Saysis Starcities versions prior to 1.1.61, which stems from improper input neutralization during web page generation and could lead to a reflective cross-site scripting attack...
CVE-2025-9977
CVE-2025-9977 affects Times Software E-Payroll. The issue stems from improper sanitization of data in a POST parameter during login, which could let an unauthenticated attacker cause a DoS and may enable SQL injection; command injection attempts have also produced detailed error messages exposing...
Student Information System register.php Cross-Site Scripting Vulnerability
Student Information System is a student information system. The Student Information System suffers from a cross-site scripting vulnerability that stems from the mishandling of user input by an unspecified functional component in the /register.php file. An attacker can exploit this vulnerability b...
Student Information System register.php File SQL Injection Vulnerability
Student Information System is a student information system. Student Information System is vulnerable to a SQL injection vulnerability that originates from improper handling of user input in the /register.php file. No details of the vulnerability are available at this time...
PT-2025-47360
Name of the Vulnerable Software and Affected Versions Fortinet FortiMail versions 7.0 through 7.2 Fortinet FortiMail versions 7.4.0 through 7.4.5 Fortinet FortiMail versions 7.6.0 through 7.6.3 Description A flaw exists in Fortinet FortiMail that allows for the injection of headers in responses...
Student Information System /editprofile.php File SQL Injection Vulnerability
Student Information System is a student information system. Student Information System is vulnerable to a SQL injection vulnerability that originates from the /editprofile.php file not effectively filtering user input. No details of the vulnerability are available at this time...
Student Information System editprofile.php File Cross-Site Scripting Vulnerability
Student Information System is a student information system. A cross-site scripting vulnerability exists in the Student Information System, which originates from an unspecified function in the /editprofile.php file that improperly handles user input. An attacker can exploit this vulnerability by...
CVE-2025-55059
CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...
CVE-2025-55059
CVE-2025-55059 is described across sources as a CWE-79 XSS due to improper input neutralization during web page generation. Connected documents provide concrete detail for Maxum Rumpus FTP Server, noting a vulnerability in version 9.0.12 (XSS via unneutralized input). Other entries (Red Hat, ENIS...
