Ssr Pages Builder 路径遍历漏洞

Ssr Pages is an Html page builder for Ssr server-side rendering. a path traversal vulnerability exists in Ssr Pages, which stems from a path traversal issue that can occur when untrusted input is provided to the svg attribute as an argument to the buildMessagePageOptions function, which can be...

CVE-2021-24317

The Listeo WordPress theme before 1.6.11 did not properly sanitise some parameters in its Search, Booking Confirmation and Personal Message pages, leading to Cross-Site Scripting issues...

UBUNTU-CVE-2020-13947

An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0...

CVE-2017-12984

PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/messageupdate.php...

PCWAP enterprise mobile website source code v1.4.0 suffers from stored cross-site scripting vulnerability

PCWAP enterprise mobile website source code is a set of cell phone website and PC website with the same background management of free PHP enterprise cell phone building system. PCWAP enterprise mobile website source code v1.4.0 '/pcwap1.4.0/Tpl/Admin/Message/index.html' file exists to store...

gamesclub.asiacell.com XSS vulnerability

Vulnerable URL: http://gamesclub.asiacell.com/html5/Arabic/Msg.aspx?msg=%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

CVE-2005-4148

Lyris ListManager 8.5, and possibly other versions before 8.8, includes sensitive information in the env hidden variable, which allows remote attackers to obtain information such as the installation path by requesting a non-existent page and reading the env variable from the resulting error messa...