1289 matches found
CVE-2020-7936
An open redirect on the login form and possibly other places in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site...
PYSEC-2020-85
An open redirect on the login form and possibly other places in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site...
CVE-2020-7936
An open redirect on the login form and possibly other places in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site...
PYSEC-2020-85
An open redirect on the login form and possibly other places in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site...
Open redirect
An open redirect on the login form and possibly other places in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site...
CVE-2020-7936
An open redirect on the login form and possibly other places in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site...
CVE-2020-7936
CVE-2020-7936 describes an open redirect in Plone 4.0–5.2.1 on the login form (and possibly other entry points). The vulnerability allows an attacker to craft a link that, after following and possibly after login, redirects the user to the attacker's site. Affected software is Plone (4.0–5.2.1); ...
CVE-2020-7936: URL Redirection to Untrusted Site
An open redirect on the login form and possibly other places in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site...
PT-2020-19858
Name of the Vulnerable Software and Affected Versions Plone versions 4.0 through 5.2.1 Description The issue is related to an open redirect on the login form and possibly other areas, allowing an attacker to create a link that redirects to an attacker's site after login. Recommendations For...
nu.ac.bd Cross Site Scripting vulnerability OBB-1051697
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| nu.ac.bd ---|--- Open Bug Bounty...
XSS in login form
In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form...
GHSA-2P6P-V69P-9MM9 XSS in login form
In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form...
CVE-2019-16344
A cross-site scripting XSS vulnerability in the login form /ScadaBR/login.htm in ScadaBR 1.0CE allows a remote attacker to inject arbitrary web script or HTML via the username or password parameter...
CVE-2019-16344
A cross-site scripting XSS vulnerability in the login form /ScadaBR/login.htm in ScadaBR 1.0CE allows a remote attacker to inject arbitrary web script or HTML via the username or password parameter...
Cross site scripting
A cross-site scripting XSS vulnerability in the login form /ScadaBR/login.htm in ScadaBR 1.0CE allows a remote attacker to inject arbitrary web script or HTML via the username or password parameter...
CVE-2019-16344
CVE-2019-16344 affects ScadaBR 1.0CE, with an XSS vulnerability in the login form (/ScadaBR/login.htm) that allows an attacker to inject arbitrary script or HTML via the username or password parameter. The root cause is described as a lack of proper validation of client‑side data in the WEB appli...
Sensorweb ScadaBR Cross-Site Scripting Vulnerability (CNVD-2019-36859)
Sensorweb ScadaBR is a suite of open source software from Sensorweb for developing automated data acquisition and monitoring applications. A cross-site scripting vulnerability exists in the login form /ScadaBR/login.htm in Sensorweb ScadaBR version 1.0CE, which stems from a lack of proper...
CVE-2019-16392
SPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages...