3289 matches found
CVE-2022-29004
Diary Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name parameter in search-result.php...
CVE-2022-29004
Diary Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name parameter in search-result.php...
Cross site scripting
Diary Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name parameter in search-result.php...
CVE-2022-29004
Diary Management System v1.0 is affected by a Cross-Site Scripting (XSS) vulnerability exploitable via the Name parameter in search-result.php. The Nuclei template (CVE-2022-29004) confirms the issue and describes impact as injection of malicious scripts leading to user-facing script execution, s...
CVE-2022-1816
A vulnerability, which was classified as problematic, has been found in Zoo Management System 1.0. Affected by this issue is /zoo/admin/publichtml/viewaccounts?type=zookeeper of the content module. The manipulation of the argument adminname with the input alert1 leads to an authenticated cross si...
PT-2022-19359 · Unknown · Online Birth Certificate System
Name of the Vulnerable Software and Affected Versions: Online Birth Certificate System version 1.2 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname or lname parameters in the /obcs/user/profile.php component. This enabl...
Online Birth Certificate System 跨站脚本漏洞
Online Birth Certificate System is an online birth certificate system by the individual developer ANUJ KUMAR. A security vulnerability exists in Online Birth Certificate System version v1.2, which stems from multiple cross-site scripting XSS issues in the component /obcs/user/profile.php. An...
PT-2022-19358 · Unknown · Library Management System
Name of the Vulnerable Software and Affected Versions: Diary Management System version 1.0 Description: The Diary Management System contains a cross-site scripting XSS issue via the Name parameter in the "search-result.php" endpoint. This allows for potential malicious script injection...
GHSA-JJ4J-CWGQ-FX7G ViMbAdmin Cross-site Scripting Vulnerabilities
Multiple cross-site scripting XSS vulnerabilities in ViMbAdmin 3.0.15 allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 transport parameter to domain/add; the 3 name parameter to mailbox/add/did/; the 4 goto parameter to alias/add/did/; or the 5 captchatext...
Cross-site Scripting (XSS)
Overview UmbracoCms.Core is an ASP.NET CMS. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper user input sanitization. Exploiting this vulnerability is possible via the PageName aka nodename parameter during the creation of a new page. Details Cross-site...
Umbraco CMS vulnerable to stored XSS
Cross-site scripting XSS vulnerability in Umbraco CMS before 7.7.3 allows remote attackers to inject arbitrary web script or HTML via the "page name" aka nodename parameter during the creation of a new page, related to Umbraco.Web.UI/umbraco/dialogs/Publish.aspx.cs and...
CVE-2022-29950
Experian Hunter 1.16 is described as allowing remote authenticated users to modify assumed-immutable elements via (1) the rule name parameter on the Rules page or (2) the subrule name or (3) the categories name parameters on the Subrules page. Red Hat and NVD entries reiterate this description, a...
CVE-2022-27413
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in admin.php...
CVE-2021-39390
Stored XSS in PartKeepr 1.4.0 Edit section in multiple api endpoints via name parameter...
CVE-2021-39390
Stored XSS in PartKeepr 1.4.0 Edit section in multiple api endpoints via name parameter...
CVE-2021-39390
Stored XSS in PartKeepr 1.4.0 Edit section in multiple api endpoints via name parameter...
CVE-2021-39390
Stored XSS in PartKeepr 1.4.0 Edit section in multiple api endpoints via name parameter...
RG-NBR-E Enterprise Gateway RG-NBR2100G-E 安全漏洞
The RG-NBR-E Enterprise Gateway RG-NBR2100G-E is an enterprise gateway. A security vulnerability exists in the RG-NBR-E Enterprise Gateway RG-NBR2100G-E that stems from a Remote Code Execution RCE vulnerability discovered via the fileName parameter in /guestauth/cfg/upLoadCfg.php...