91 matches found
CVE-2020-36608: Improper Neutralization
A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file adminorganizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched...
Zenario CMS 跨站脚本漏洞
Zenario CMS is a Zenario open source application . Provides a Web-based content management system. A security vulnerability exists in Zenario CMS that stems from some unknown functionality in adminorganizer.js of the Error Log module , which can lead to cross-site scripting...
PT-2022-9010 · Tribal Systems · Zenario Cms
Name of the Vulnerable Software and Affected Versions: Tribal Systems Zenario CMS versions prior to 8.5.51340 Description: A vulnerability has been found in the Error Log Module of the Tribal Systems Zenario CMS, specifically in the file admin organizer.js. This issue leads to cross-site scriptin...
CVE-2020-36608 Tribal Systems Zenario CMS Error Log Module admin_organizer.js cross site scripting
A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file adminorganizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched...
CVE-2020-36608 Tribal Systems Zenario CMS Error Log Module admin_organizer.js cross site scripting
A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file adminorganizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched...
CVE-2020-36608
A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file adminorganizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched...
PT-2022-15300 · Huawei · Hwlog
Name of the Vulnerable Software and Affected Versions: Huawei HWLog affected versions not specified Description: The DFX module has a Use-After-Free UAF vulnerability. Successful exploitation of this vulnerability may affect system stability. Recommendations: At the moment, there is no informatio...
CVE-2020-24038
myFax version 229 logs sensitive information in the export log module which allows any user to access critical information...
Information disclosure
myFax version 229 logs sensitive information in the export log module which allows any user to access critical information...
CVE-2020-24038
myFax version 229 logs sensitive information in the export log module which allows any user to access critical information...
CVE-2020-24038
CVE-2020-24038 affects myFax version 229, where the export log module logs sensitive information, enabling access to critical data by any user. The Red Hat, CNVD, CNNVD and related records corroborate an information disclosure flaw rooted in the export logging, resulting in exposure of sensitive ...
CVE-2020-24038: Insertion of Sensitive Information into Log File
myFax version 229 logs sensitive information in the export log module which allows any user to access critical information...
PT-2021-11002
Name of the Vulnerable Software and Affected Versions: myFax version 229 Description: The issue concerns the logging of sensitive information in the export log module, allowing any user to access critical information. Recommendations: For myFax version 229, consider restricting access to the expo...
MyFax 日志信息泄露漏洞
myFax is a software application. A complete fax solution for the Internet. A security vulnerability exists in myFax that stems from version 229 of myFax logging sensitive information in the export log module, which can be exploited by an attacker to access critical information...
GHSA-H58V-C6RF-G9F7 Cross site scripting in the system log
Impact It is possible to inject code into the tllog table that will be executed in the browser when the system log is called in the back end. Patches Update to Contao 4.9.16 or 4.11.5. Workarounds Disable the system log module in the back end for all users especially admin users. References...
SECUDOS DOMOS Log Module Cross-Site Scripting Vulnerability
SECUDOS DOMOS is an operating system for IoT devices from SECUDOS Germany. log is one of the logging modules. A cross-site scripting vulnerability exists in the Log module in SECUDOS DOMOS versions prior to 5.6. The vulnerability stems from the lack of proper validation of client-side data in the...
CVE-2019-18665
The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...
CVE-2019-18664
The Log module in SECUDOS DOMOS before 5.6 allows XSS...