jobs-wolfsburg.com Cross Site Scripting vulnerability OBB-2516228

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

jobs-wilhelmshaven.com Cross Site Scripting vulnerability OBB-2516226

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

jobs-siegen.com Cross Site Scripting vulnerability OBB-2516224

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

jobs-kempten.com Cross Site Scripting vulnerability OBB-2516207

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

jobs-kaiserslautern.com Cross Site Scripting vulnerability OBB-2516203

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

jobs-goerlitz.com Cross Site Scripting vulnerability OBB-2516192

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SQL injection in GridHelperService.php

Description In line 786, we can see $conditionFilters = $filterField . ' ' . $operator . ' ' . $value;. The three variables joins to a string, and the variables come from the request parameter.Maybe line 793 is vulnerable too. The code comes from prepareAssetListingForGrid function. The function ...

Webmin Cross-Site Scripting Vulnerability (CNVD-2022-61345)

Webmin is the Webmin community's set of Web-based system management tools for Unix-like operating systems. version 1.973 of Webmin contains a cross-site scripting vulnerability that stems from a lack of filtering and escaping in the scheduled Cron jobs feature. An attacker could use this...

CVE-2021-32156

A cross-site request forgery CSRF vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

CVE-2021-32156

A cross-site request forgery CSRF vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

CVE-2021-32156

A cross-site request forgery CSRF vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

CVE-2021-32157

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

CVE-2021-32157

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

CVE-2021-32157

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

Cross site scripting

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

CVE-2021-32157

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

CVE-2021-32156

A cross-site request forgery CSRF vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

CVE-2021-32157

Webmin 1.973 contains a Cross-Site Scripting (XSS) vulnerability via the Scheduled Cron Jobs feature. The issue arises from insufficient filtering/escaping in that feature, enabling client-side JavaScript execution. Connected sources confirm CVE-2021-32157 and corroborating mentions in RH and OSV...

CVE-2021-32156

CVE-2021-32156 affects Webmin 1.973 via the Scheduled Cron Jobs feature. Root cause: CSRF due to lack of token validation in the Cron/scheduled task handling. Impact: allows cross-site requests that could perform sensitive actions; CVSS v3.1 base score 8.8 (HIGH) with UI/Risk requiring user inter...