3289 matches found
Rukovoditel 跨站脚本漏洞
Rukovoditel is a set of Web-based open source project management software from the Rukovoditel team. The software has project management, customer relationship management and other features. A cross-site scripting vulnerability exists in Rukovoditel version 3.2.1, which stems from the vulnerabili...
CVE-2022-43164
A stored cross-site scripting XSS vulnerability in the Global Lists feature /index.php?module=globallists/lists of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter after clicking "Add"...
PT-2022-26786 · Unknown · Rukovoditel
Name of the Vulnerable Software and Affected Versions: Rukovoditel version 3.2.1 Description: A stored cross-site scripting XSS issue exists in the Users Access Groups feature, specifically in the /index.php?module=users groups/users groups API endpoint, allowing authenticated attackers to execut...
CVE-2022-41358
A stored cross-site scripting XSS vulnerability in Garage Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the categoriesName parameter in createCategories.php...
CVE-2022-43185
A stored cross-site scripting XSS vulnerability in the Configuration/Holidays module of Rukovoditel v3.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter...
Cross site scripting
A stored cross-site scripting XSS vulnerability in the Configuration/Holidays module of Rukovoditel v3.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter...
Rukovoditel 跨站脚本漏洞
Rukovoditel is a set of Web-based open source project management software from the Rukovoditel team. The software has project management, customer relationship management and other features. A security vulnerability exists in Rukovoditel version v3.2.1 that originated from allowing an attacker to...
Cross site scripting
A Cross-site scripting XSS vulnerability in the Frontend Editor module's integration with CKEditor in Liferay Portal 7.3.2 through 7.4.3.14, and Liferay DXP 7.3 before update 6, and 7.4 before update 15 allows remote attackers to inject arbitrary web script or HTML via the 1 name, or 2 namespace...
CVE-2022-3587
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component My Account. The manipulation of the argument First Name leads to cross site scripting. The attack...
Liferay Portal 跨站脚本漏洞
Liferay Portal is a J2EE-based portal solution from Liferay, Inc. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, and more. A security vulnerability exists in Liferay Portal...
Cashier Queuing System 安全漏洞
Cashier Queuing System is a cashier queuing system by Carlo Montero Personal Developer. A security vulnerability exists in Cashier Queuing System version 1.0, which stems from an unknown functionality of the component Cashiers Tab, where manipulation of the parameter Name can lead to a cross-site...
PT-2022-22964 · Sourcecodester · Sourcecodester Cashier Queuing System
Name of the Vulnerable Software and Affected Versions: SourceCodester Cashier Queuing System version 1.0 Description: A problematic issue was found in the Cashiers Tab component, where the manipulation of the Name argument leads to cross-site scripting. This issue can be exploited remotely...
Simple Cold Storage Management System 跨站脚本漏洞
Simple Cold Storage Management System is a Simple Cold Storage Management System by Carlo Montero Personal Developer. A security vulnerability exists in SourceCodester Simple Cold Storage Management System version 1.0, which stems from an operation on the parameter Name that could lead to a...
PT-2022-22856 · Sourcecodester · Sourcecodester Simple Cold Storage Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Cold Storage Management System version 1.0 Description: A vulnerability was found in the component Add New Storage Handler, where the manipulation of the Name argument leads to cross-site scripting. The attack can be...
CVE-2022-3464
A vulnerability classified as problematic has been found in puppyCMS up to 5.1. This affects an unknown part of the file /admin/settings.php. The manipulation of the argument sitename leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this...
puppyCMS 跨站脚本漏洞
puppetCMS is a software application. A flat file CMS. A security vulnerability exists in puppyCMS versions prior to 5.1, which originates in an unknown section of the file /admin/settings.php, where the action parameter sitename leads to cross-site scripting XSS...
PT-2022-22262 · Puppycms · Puppycms
Name of the Vulnerable Software and Affected Versions: puppyCMS versions up to 5.1 Description: A problematic issue has been found in puppyCMS, affecting an unknown part of the file /admin/settings.php. The manipulation of the site name argument leads to cross-site scripting. It is possible to...
Book Store Management System 安全漏洞
Book Store Management System is an online bookstore system by Carlo Montero, an individual developer. A security vulnerability exists in Book Store Management System version 1.0, which is a cross-site scripting vulnerability due to manipulation of the buyername parameter...
The vulnerability of the Administrative Console Framework software platform of IBM Spectrum Protect Plus allows a perpetrator to execute arbitrary code.
The vulnerability of the Administrative Console Framework service of the IBM Spectrum Protect Plus software data protection platform lies in the lack of measures to neutralize special elements entered by the user during syntax analysis of the node name parameter. Exploiting this vulnerability...