CVE-2024-7928

FastAdmin 경로 순회 취약점 익스플로잇 FastAdmin 1.3.3.20220121까지에서 문제가 될 수 있는 취약점이 발견되었습니다. 이 문제는 파일 /index/ajax/lang의 알 수 없는 기능에 영향을 미칩니다. lang 인수의 조작은 경로 순회로 이어집니다. 공격은 원격으로 시작될 수 있습니다. 익스플로잇이 공개되어 사용될 수 있습니다. 버전 1.3.4.20220530으로 업그레이드하면 이 문제를 해결할 수 있습니다. 영향을 받는 구성 요소를 업그레이드하는 것이 권장됩니다...

CVE-2026-78187

A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication Page. Such manipulation of the argument lang leads to cross site scripting. The attack may be performed from remote. A high complexity level is associated with this attack. The...

EUVD-2026-64723

A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication Page. Such manipulation of the argument lang leads to cross site scripting. The attack may be performed from remote. A high complexity level is associated with this attack. The...

CVE-2015-10058

A vulnerability, which was classified as problematic, was found in Wikisource Category Browser. This affects an unknown part of the file index.php. The manipulation of the argument lang leads to cross site scripting. It is possible to initiate the attack remotely. The patch is named...

CVE-2024-7928: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The exploi...

CVE-2024-0246: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in IceWarp 12.0.2.1/12.0.3.1. This affects an unknown part of the file /install/ of the component Utility Download Handler. The manipulation of the argument lang with the input 1%27"%26%25 leads to cross site scripting. It is possible to...

Cross site scripting

A vulnerability, which was classified as problematic, was found in Wikisource Category Browser. This affects an unknown part of the file index.php. The manipulation of the argument lang leads to cross site scripting. It is possible to initiate the attack remotely. The patch is named...

CVE-2015-10058: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in Wikisource Category Browser. This affects an unknown part of the file index.php. The manipulation of the argument lang leads to cross site scripting. It is possible to initiate the attack remotely. The patch is named...

PT-2023-10237 · Unknown · Wikisource Category Browser

Name of the Vulnerable Software and Affected Versions: Wikisource Category Browser affected versions not specified Description: A vulnerability was found in Wikisource Category Browser, affecting an unknown part of the file index.php. The manipulation of the lang argument leads to cross-site...