117 matches found
Regis Freyd Monica Cross-Site Scripting Vulnerability
Regis Freyd Monica is an application by the personal developer of Regis Freyd in the United States. Offers to organize and record your interactions with your loved ones. A cross-site scripting vulnerability exists in Regis Freyd Monica versions prior to 2.19.1, which can be exploited by an attack...
CVE-2020-35660
Cross Site Scripting XSS in Monica before 2.19.1 via the journal page...
CVE-2020-35660
Cross Site Scripting XSS in Monica before 2.19.1 via the journal page...
Cross site scripting
Cross Site Scripting XSS in Monica before 2.19.1 via the journal page...
CVE-2020-35660
CVE-2020-35660 is a Cross-Site Scripting (XSS) vulnerability in Monica (Regis Freyd Monica) versions prior to 2.19.1, exploitable via the journal page. The connected Huntr entry describes a stored XSS payload in the journal session, e.g. injecting HTML such as , indicating a persistent client-sid...
CVE-2020-35660
Cross Site Scripting XSS in Monica before 2.19.1 via the journal page...
Regis Freyd Monica 跨站脚本漏洞
Regis Freyd Monica is an application by the personal developer of Regis Freyd in the United States. Offers to organize and record your interactions with your loved ones. A cross-site scripting vulnerability exists in Regis Freyd Monica versions prior to 2.19.1, which can be exploited by an attack...
Monica 2.19.1 - (last_name) Stored XSS Vulnerability
Exploit Title: Monica 2.19.1 - 'lastname' Stored XSS Exploit Author: BouSalman Vendor Homepage: https://www.monicahq.com/ Software Link: https://github.com/monicahq/monica/releases Version: Monica 2.19.1 Tested on: Ubuntu 18.04 CVE : CVE-2021-27370 POST /people HTTP/1.1 Host: 192.168.99.162...
Monica cross-site scripting vulnerability (CNVD-2021-12658)
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the First Name field...
Monica Cross-Site Scripting Vulnerability (CNVD-2021-12650)
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the Description field...
Monica Cross-Site Scripting Vulnerability (CNVD-2021-12659)
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct cross-site scripting attacks via the Middle Name field...
Monica Cross-Site Scripting Vulnerability
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the Nickname field...
Monica 2.19.1 - 'last_name' Stored XSS
Exploit Title: Monica 2.19.1 - 'lastname' Stored XSS Date: 22-02-2021 Exploit Author: BouSalman Vendor Homepage: https://www.monicahq.com/ Software Link: https://github.com/monicahq/monica/releases Version: Monica 2.19.1 Tested on: Ubuntu 18.04 CVE : CVE-2021-27370 POST /people HTTP/1.1 Host:...
Monica 2.19.1 Cross Site Scripting
Exploit Title: Monica 2.19.1 - 'lastname' Stored XSS Date: 22-02-2021 Exploit Author: BouSalman Vendor Homepage: https://www.monicahq.com/ Software Link: https://github.com/monicahq/monica/releases Version: Monica 2.19.1 Tested on: Ubuntu 18.04 CVE : CVE-2021-27370 POST /people HTTP/1.1 Host:...
Monica Cross-Site Scripting Vulnerability (CNVD-2021-12660)
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the Last Name field...
CVE-2021-27559
The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...
CVE-2021-27370
The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field...
CVE-2021-27370
The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field...