Lucene search
+L

26 matches found

Snyk
Snyk
added 2023/06/15 9:30 p.m.4 views

XML Injection

Overview magento/project-community-edition is an eCommerce Platform for Growth Community Edition Affected versions of this package are vulnerable to XML Injection through the XML processing mechanism. An attacker can bypass security features by sending a specially crafted XML script. Remediation...

7.1CVSS7.2AI score0.00793EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/11/11 12:0 a.m.4 views

PT-2022-18317 · Intel · Quartus Prime Standard +1

Name of the Vulnerable Software and Affected Versions: IntelR Quartus Prime Pro and Standard edition software affected versions not specified Description: The issue concerns XML injection in the QuartusR Prime Programmer, which may allow an unauthenticated user to potentially enable information...

7.5CVSS7.4AI score0.00602EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2021/08/11 12:0 a.m.8 views

PT-2021-6352 · Adobe · Magento Commerce

Name of the Vulnerable Software and Affected Versions: Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier Magento Commerce version 2.3.7 and earlier Description: The issue is related to an XML Injection vulnerability in the Widgets Update Layout of Magento Commerce. This...

9.1CVSS7.1AI score0.0344EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2020/12/07 12:0 a.m.14 views

The vulnerability of the KTS “Lighthouse” web interface, which stems from the lack of measures to sanitize input data, allows a perpetrator to inject any desired web script or HTML code.

The vulnerability of the KTS “Lighthouse” web interface is related to the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to inject arbitrary web scripts or HTML code...

4.3CVSS5.7AI score
Exploits0Affected Software1
CNVD
CNVD
added 2018/05/29 12:0 a.m.3 views

Drupal Automated Logout Module HTML Injection Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. An HTML injection vulnerability exists in Drupal's Automated Logout module that stems from a failure to adequately validate user input. An attacker could exploit this...

7.8AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2017/09/14 12:0 a.m.6 views

PT-2017-5751 · Joomla · Googlemaps Plugin

Name of the Vulnerable Software and Affected Versions: Googlemaps plugin for Joomla! versions prior to 3.1 Description: The issue allows remote attackers to conduct XML injection attacks. This is achieved by exploiting the url parameter in the plugin googlemap2 proxy.php file. Recommendations: Fo...

9.8CVSS9.5AI score0.02219EPSS
Exploits1References5
Rows per page
Query Builder