PT-2024-20427 · Act-On · Act-On

Name of the Vulnerable Software and Affected Versions: Act-On version 2023 Description: The issue allows a remote attacker to execute arbitrary code via the newUser parameter in the "login.jsp" component. This enables the attacker to perform Cross Site Scripting attacks. Recommendations: For Act-...

CVE-2024-37679

Cross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft v.8.0 and before allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp parameter...

CVE-2024-37679

Cross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft v.8.0 and before allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp parameter...

PT-2024-27713 · Finesoft · Finesoft

Name of the Vulnerable Software and Affected Versions: Finesoft versions 8.0 and before Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the "login.jsp" parameter. This enables the attacker to perform actions such as executing arbitrary code...

CVE-2024-37679: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft v.8.0 and before allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp parameter...

CVE-2023-40277

An issue was discovered in OpenClinic GA 5.247.01. A Reflected Cross-Site Scripting XSS vulnerability has been discovered in the login.jsp message parameter...

PT-2024-21361

Name of the Vulnerable Software and Affected Versions Meta4 HR versions 819.001.022 and earlier Description A Cross-Site Scripting issue has been identified. The endpoint "/sse generico/generico login.jsp" is vulnerable to attack via the lang query. For example, the URL "/sse generico/generico...

CVE-2023-40277

OpenClinic GA version 5.247.01 is susceptible to a Reflected Cross-Site Scripting (XSS) vulnerability. The flaw exists in the message parameter of the login.jsp page, where improper neutralization of input during web page generation allows for script injection. Exploitation could lead to unauthor...

CVE-2023-40277: Improper Neutralization of Input During Web Page Generation

An issue was discovered in OpenClinic GA 5.247.01. A Reflected Cross-Site Scripting XSS vulnerability has been discovered in the login.jsp message parameter...

CVE-2023-47503

An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the template management module...

CVE-2023-47503

An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the template management module...

PT-2023-30467 · Jflyfox · Jfinalcms

Name of the Vulnerable Software and Affected Versions: jflyfox jfinalCMS version 5.1.0 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the "login.jsp" component in the template management module. Recommendations: For jflyfox jfinalCMS version 5.1....

CVE-2023-47503: Undefined Security Weakness

An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the template management module...

Cross-Site Scripting (XSS)

org.wso2.am:am-parent is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the user input before it output to the front end, allowing an attacker to inject and execute malicious web scripts or HTML via a crafted payload through the tenantDomain parameter of...

CVE-2022-41319: Improper Neutralization of Input During Web Page Generation

A Reflected Cross-Site Scripting XSS vulnerability affects the Veritas Desktop Laptop Option DLO application login page aka the DLOServer/restore/login.jsp URI. This affects versions before 9.8 e.g., 9.1 through 9.7...

CVE-2022-26959

There are two full read/write Blind/Time-based SQL injection vulnerabilities in the Northstar Club Management version 6.3 application. The vulnerabilities exist in the userName parameter of the processlogin.jsp page in the /northstar/Portal/ directory and the userID parameter of the login.jsp pag...

Sql injection

There are two full read/write Blind/Time-based SQL injection vulnerabilities in the Northstar Club Management version 6.3 application. The vulnerabilities exist in the userName parameter of the processlogin.jsp page in the /northstar/Portal/ directory and the userID parameter of the login.jsp pag...

CVE-2022-26959

CVE-2022-26959 describes two full Blind/Time-based SQL injection vulnerabilities in Northstar Club Management v6.3. The flaws affect: (1) processlogin.jsp in /northstar/Portal/ via the userName parameter, and (2) login.jsp in /northstar/iphone/ via the userID parameter. Exploitation could grant f...

CVE-2022-26959: Improper Neutralization of Special Elements used in an SQL Command

There are two full read/write Blind/Time-based SQL injection vulnerabilities in the Northstar Club Management version 6.3 application. The vulnerabilities exist in the userName parameter of the processlogin.jsp page in the /northstar/Portal/ directory and the userID parameter of the login.jsp pag...

PT-2022-18141

Name of the Vulnerable Software and Affected Versions Northstar Club Management version 6.3 Description The issue concerns two Blind/Time-based SQL injection vulnerabilities. These exist in the userName parameter of the "processlogin.jsp" page in the "/northstar/Portal/" directory and the userID...