CVE-2022-3493: Improper Neutralization

A vulnerability, which was classified as problematic, has been found in SourceCodester Human Resource Management System 1.0. This issue affects some unknown processing of the component Add Employee Handler. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site...

CVE-2022-1076

A vulnerability was found in Automatic Question Paper Generator System 1.0. It has been classified as problematic. This affects the file /aqpg/users/login.php of the component My Account Page. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is...

PT-2022-13643

Name of the Vulnerable Software and Affected Versions SourceCodester Microfinance Management System version 1.0 Description A vulnerability was found in the system, affecting the file /mims/app/addcustomerHandler.php. The issue arises from the manipulation of the arguments first name, middle name...

PT-2022-13638

Name of the Vulnerable Software and Affected Versions Automatic Question Paper Generator System version 1.0 Description A problematic issue has been found, affecting the My Account Page component, specifically the file /aqpg/users/login.php. The manipulation of the First Name, Middle Name, and La...

CVE-2021-27369

The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...

CVE-2021-27369

The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...

Design/Logic Flaw

The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...

CVE-2021-27369

The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...

CVE-2021-27369

The vulnerability is in Monica (open-source personal relationship management system) specifically version 2.19.1. A stored XSS flaw exists on the Contact page that can be triggered via the Middle Name field. Root cause is not detailed in the provided documents beyond the store-based script inject...

CVE-2021-27369

The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...

Monica 跨站脚本漏洞

Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct cross-site scripting attacks via the Middle Name field...

PT-2021-17416

Name of the Vulnerable Software and Affected Versions Monica version 2.19.1 Description The issue concerns a stored XSS vulnerability in the Contact page, specifically via the Middle Name field. This allows for malicious scripts to be stored and executed when the page is accessed. Recommendations...

CVE-2021-27369: Improper Neutralization of Input During Web Page Generation

The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...

CVE-2020-7934

In LifeRay Portal CE 7.1.0 through 7.2.1 GA2, the First Name, Middle Name, and Last Name fields for user accounts in MyAccountPortlet are all vulnerable to a persistent XSS issue. Any user can modify these fields with a particular XSS payload, and it will be stored in the database. The payload wi...

CVE-2009-4848

Multiple cross-site scripting XSS vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attackers to inject arbitrary web script or HTML via the 1 userId parameter to tvserver/server/user/setPermissions.jsp, 2 deptName parameter to...