161 matches found
PT-2021-23011
Name of the Vulnerable Software and Affected Versions bugs versions 1.8 and below Description The issue allows remote attackers to inject arbitrary web script or HTML via the email parameter in the install/index.php file. This enables attackers to perform cross-site scripting XSS attacks...
PT-2021-23012
Name of the Vulnerable Software and Affected Versions bugs versions 1.8 and below Description The issue is a cross-site scripting XSS vulnerability in the install/index.php file. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the first name parameter...
CVE-2021-40922: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the lastname parameter...
PT-2021-23010
Name of the Vulnerable Software and Affected Versions bugs versions 1.8 and below Description The issue is a cross-site scripting XSS vulnerability in the install/index.php file. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the last name parameter...
PT-2021-10186
Name of the Vulnerable Software and Affected Versions: Rukovoditel version 2.4.1 Description: A stored cross-site scripting XSS issue exists in the Name of application field on the General Configuration page, allowing remote attackers to inject arbitrary web script or HTML via a crafted website...
CVE-2020-22937
A remote code execution RCE in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code via writing malicious code to the install file...
CVE-2020-22937: Improper Control of Generation of Code
A remote code execution RCE in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code via writing malicious code to the install file...
CVE-2021-37389
Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter...
CVE-2021-37389
CVE-2021-37389 affects Chamilo 1.11.14. The vulnerability is a stored XSS in the installer paths main/install/index.php and main/install/ajax.php via the port parameter. The connected documents consistently describe this CVE as a stored XSS issue in Chamilo LMS and do not provide exploitation det...
CVE-2021-37389: Improper Neutralization of Input During Web Page Generation
Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter...
PT-2021-21629
Name of the Vulnerable Software and Affected Versions Chamilo version 1.11.14 Description The issue allows stored XSS via "main/install/index.php" and "main/install/ajax.php" through the port parameter. Recommendations For Chamilo version 1.11.14, as a temporary workaround, consider restricting...
CVE-2020-26043
An issue was discovered in Hoosk CMS v1.8.0. There is a XSS vulnerability in install/index.php...
CVE-2020-26042
An issue was discovered in Hoosk CMS v1.8.0. There is a SQL injection vulnerability in install/index.php...
CVE-2020-26041
An issue was discovered in Hoosk CmS v1.8.0. There is an Remote Code Execution vulnerability in install/index.php...
CVE-2020-26043
An issue was discovered in Hoosk CMS v1.8.0. There is a XSS vulnerability in install/index.php...
Sql injection
An issue was discovered in Hoosk CMS v1.8.0. There is a SQL injection vulnerability in install/index.php...
Cross site scripting
An issue was discovered in Hoosk CMS v1.8.0. There is a XSS vulnerability in install/index.php...
CVE-2020-26042
An issue was discovered in Hoosk CMS v1.8.0. There is a SQL injection vulnerability in install/index.php...
CVE-2020-26042
CVE-2020-26042 affects Hoosk CMS v1.8.0 with a SQL injection vulnerability in install/index.php. Per the connected NVD record, the issue yields partial confidentiality, partial integrity, and partial availability impacts (CVSS v2 base 7.5, HIGH; CVSS v3.1 base 9.8, CRITICAL). Exploitation details...