Cross site scripting

A Cross Site Scripting XSS vulnerability in Concrete CMS before 9.2.3 exists via the Name parameter during installation aka Site of Installation or Settings...

CVE-2023-44764: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS vulnerability in Concrete CMS before 9.2.3 exists via the Name parameter during installation aka Site of Installation or Settings...

CVE-2023-44764

A Cross Site Scripting XSS vulnerability in Concrete CMS before 9.2.3 exists via the Name parameter during installation aka Site of Installation or Settings...

CVE-2023-44764

A Cross Site Scripting XSS vulnerability in Concrete CMS before 9.2.3 exists via the Name parameter during installation aka Site of Installation or Settings...

PT-2023-5898 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this...

CVE-2023-33271

An issue was discovered in DTS Monitoring 3.57.0. The parameter commonname within the SSL Certificate check function is vulnerable to OS command injection blind...

CVE-2023-33271

An issue was discovered in DTS Monitoring 3.57.0. The parameter commonname within the SSL Certificate check function is vulnerable to OS command injection blind...

PT-2023-24256 · Unknown · Dts Monitoring

Name of the Vulnerable Software and Affected Versions: DTS Monitoring version 3.57.0 Description: An issue was discovered in the SSL Certificate check function where the common name parameter is vulnerable to OS command injection, specifically blind command injection. Recommendations: For DTS...

CVE-2023-43734

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "name" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43730

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "countriesname1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43731

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "zonename" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43707

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "CatalogsPageDescriptionForm1name " parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

PT-2023-28952 · Unknown · Oscommerce

Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the zone name parameter, potentially leading to unauthorized execution of script...

PT-2023-28955 · Unknown · Oscommerce

Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the name parameter, potentially leading to unauthorized execution of scripts...

PT-2023-28942 · Unknown · Oscommerce

Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the orders status groups name1 parameter. This could potentially lead to...

Best Courier Management System Cross-Site Scripting Vulnerability

Best Courier Management System is a courier management system by Mayuri K., a personal developer. A cross-site scripting vulnerability exists in Best Courier Management System version 1.0, which stems from a cross-site scripting vulnerability due to incorrect manipulation of the parameter First...

CVE-2023-43734: Improper Neutralization of Input During Web Page Generation

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "name" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43724: Improper Neutralization of Input During Web Page Generation

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "derb6zmklgtjuhh2cn5chn2qjbm2stgmfa4.oastify.comscription1name" parameter, potentially leading to unauthorized execution of scripts within a user's web...

CVE-2023-5286

A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file addcategory.php of the component Category Handler. The manipulation of the argument categoryname leads to cross site...

Expense Tracker Cross-Site Scripting Vulnerability

Expense Tracker is an expense tracker organized by SourceCode and Projects. A cross-site scripting vulnerability exists in Expense Tracker v1. The vulnerability stems from the fact that incorrect manipulation of the parameter categoryname can lead to cross-site scripting...