CVE-2026-19378: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Task Management System 1.0. This issue affects some unknown processing of the file /user/CommentSave.php. The manipulation of the argument comment/taskid/mineId/recId/myName/myImage results in cross site scripting. It is possible to launch the attack...

EUVD-2018-12928

Malware in sbrugna...

CVE-2018-20370

SZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to compromise the enabled HTTP server web frontend...

SZ NetChat Options Module Cross-Site Scripting Vulnerability

SZ NetChat is an online chat application.Options module is one of the menu modules. A cross-site scripting vulnerability exists in the MyName input field of the Options module in SZ NetChat versions prior to 7.9, which can be exploited by a remote attacker to inject commands that could affect the...

Design/Logic Flaw

SZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to compromise the enabled HTTP server web frontend...

CVE-2018-20370

SZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to compromise the enabled HTTP server web frontend...

PT-2018-15326

Name of the Vulnerable Software and Affected Versions SZ NetChat versions prior to 7.9 Description The issue allows attackers to inject commands and compromise the enabled HTTP server web frontend through the MyName input field of the Options module, utilizing XSS. Recommendations For versions...

CVE-2018-20370: Improper Neutralization of Input During Web Page Generation

SZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to compromise the enabled HTTP server web frontend...