Sql injection

A vulnerability was found in ScottTZhang voter-js and classified as critical. Affected by this issue is some unknown functionality of the file main.js. The manipulation leads to sql injection. The patch is identified as 6317c67a56061aeeaeed3cf9ec665fd9983d8044. It is recommended to apply a patch ...

CVE-2014-125050

CVE-2014-125050 affects the voter-js project, with the vulnerability residing in an unknown functionality of main.js that enables SQL injection. Public documents confirm the issue is critical and tied to voter-js; a patch is identified by the commit hash 6317c67a56061aeeaeed3cf9ec665fd9983d8044, ...

CVE-2014-125050 ScottTZhang voter-js main.js sql injection

A vulnerability was found in ScottTZhang voter-js and classified as critical. Affected by this issue is some unknown functionality of the file main.js. The manipulation leads to sql injection. The patch is identified as 6317c67a56061aeeaeed3cf9ec665fd9983d8044. It is recommended to apply a patch ...

CVE-2023-22475

CVE-2023-22475 affects Canarytokens. The issue is a Cross-Site Scripting vulnerability in the history page of triggered Canarytokens prior to sha-fb61290, allowing an attacker who discovers an HTTP-based Canarytoken URL to execute JavaScript when the history page is viewed by the token’s creator....

voter-js SQL注入漏洞

voter-js is an application by tingzhang2013 individual developer. A SQL injection vulnerability exists in voter-js. An attacker could exploit this vulnerability to perform a sql injection attack...

CVE-2014-125050: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ScottTZhang voter-js and classified as critical. Affected by this issue is some unknown functionality of the file main.js. The manipulation leads to sql injection. The patch is identified as 6317c67a56061aeeaeed3cf9ec665fd9983d8044. It is recommended to apply a patch ...

PT-2023-10120 · Voter-Js · Voter-Js

Name of the Vulnerable Software and Affected Versions: voter-js affected versions not specified Description: A critical issue was found in the voter-js software, affecting some unknown functionality of the file main.js. This issue leads to sql injection. Recommendations: To fix this issue, it is...

AZL-45126 CVE-2017-20162 affecting package js-jquery 3.5.0-4

A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x. This issue affects the function parse of the file index.js. The manipulation of the argument str leads to inefficient regular expression complexity. The attack may be initiated remotely. The exploit has...

PT-2023-10805 · Unknown · Osm Lab Show-Me-The-Way

Name of the Vulnerable Software and Affected Versions: OSM Lab show-me-the-way affected versions not specified Description: A vulnerability was found in the processing of the file js/site.js, which leads to cross-site scripting. The attack may be initiated remotely. Recommendations: To fix this...

CVE-2018-25064: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in OSM Lab show-me-the-way. It has been rated as problematic. This issue affects some unknown processing of the file js/site.js. The manipulation leads to cross site scripting. The attack may be initiated remotely. The patch is named...

CVE-2016-15008

A vulnerability was found in oxguy3 coebot-www and classified as problematic. This issue affects the function displayChannelCommands/displayChannelQuotes/displayChannelAutoreplies/showChannelHighlights/showChannelBoir of the file js/channel.js. The manipulation leads to cross site scripting. The...

Cross site scripting

A vulnerability was found in oxguy3 coebot-www and classified as problematic. This issue affects the function displayChannelCommands/displayChannelQuotes/displayChannelAutoreplies/showChannelHighlights/showChannelBoir of the file js/channel.js. The manipulation leads to cross site scripting. The...

CVE-2016-15008: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in oxguy3 coebot-www and classified as problematic. This issue affects the function displayChannelCommands/displayChannelQuotes/displayChannelAutoreplies/showChannelHighlights/showChannelBoir of the file js/channel.js. The manipulation leads to cross site scripting. The...

U.S. Department of State: RXSS on https://travel.state.gov/content/travel/en/search.html

Vulnerability description not provided...

CVE-2018-25058: Use of Web Link to Untrusted Target with window.opener Access

A vulnerability classified as problematic has been found in Twitter-Post-Fetcher up to 17.x. This affects an unknown part of the file js/twitterFetcher.js of the component Link Target Handler. The manipulation leads to use of web link to untrusted target with window.opener access. It is possible ...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection due to improper input sanitization in the 'module.exports' function. Note: To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have the ability to run Node.js code within the...

Stored XSS with CSP bypass through JS file upload

Description I've seen here: https://github.com/usememos/memos/blob/main/server/resource.goL268 that has been implemented the CSP with "default-src 'self'" configuration. This configuration can be bypassed if I'm able to upload a js file, and then call it from another files while they both resides...

CVE-2022-4735

A vulnerability classified as problematic was found in asrashley dash-live. This vulnerability affects the function ready of the file static/js/media.js of the component DOM Node Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch i...

CVE-2022-4735: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in asrashley dash-live. This vulnerability affects the function ready of the file static/js/media.js of the component DOM Node Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch i...

Fedora 36 : js-jquery-ui (2022-1a01ed37e2)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-1a01ed37e2 advisory. A flaw was found in the jquery-UI package. Affected versions of this package are vulnerable to Cross-site scripting XSS attack via the initializatio...