2336 matches found
X2Engine X2CRM 跨站脚本漏洞
pczupil X2CRM is a pczupil open source application. A next generation open source social selling application for small and medium sized businesses. X2Engine X2CRM v6.9 and later versions of a security vulnerability , a remote attacker can exploit the vulnerability through the "Rename Module" tool...
CVE-2021-30042
Cross Site Scripting XSS in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Contact" field on clinics/register.php...
CVE-2021-30030
Cross Site Scripting XSS in Remote Clinic v2.0 via the Full Name field on register-patient.php...
CVE-2021-30044
Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...
CVE-2021-30044
Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...
Cross site scripting
Cross Site Scripting XSS in Remote Clinic v2.0 via the Full Name field on register-patient.php...
CVE-2021-30030
Cross Site Scripting XSS in Remote Clinic v2.0 via the Full Name field on register-patient.php...
Saad Irfan RemoteClinic 跨站脚本漏洞
Remote Clinic is an open source clinic management system that allows you to remotely manage your clinic via the Web. A cross-site scripting vulnerability exists in Remote Clinic v2.0. The vulnerability can be exploited to inject arbitrary script or html via the "full name" field of...
CVE-2021-28088
Cross-site scripting XSS in modules/content/admin/content.php in ImpressCMS profile 1.4.2 allows remote attackers to inject arbitrary web script or HTML parameters through the "Display Name" field...
ImpressCMS 跨站脚本漏洞
ImpressCMS is a MySQL-based, modular content management system CMS. The system includes modules for press releases, forums and photo albums. A cross-site scripting vulnerability exists in ImpressCMS profile version 1.4.2, which stems from a Display Name field that is not validly filtered for inpu...
Courier Management System 跨站脚本漏洞
SourceCodester Courier Management System is an application program of SourceCodester. The system provides management functions. A cross-site scripting vulnerability exists in Courier Management System 1.0 that originates in the First Name field...
CVE-2021-3124
Stored cross-site scripting XSS in form field in robust.systems product Custom Global Variables v 1.0.5 allows a remote attacker to inject arbitrary code via the vars0name field...
Monica cross-site scripting vulnerability (CNVD-2021-12658)
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the First Name field...
Monica Cross-Site Scripting Vulnerability (CNVD-2021-12660)
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the Last Name field...
CVE-2021-27370
The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field...
CVE-2021-27370
The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field...
CVE-2021-27369
The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...
CVE-2021-27369
The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...