3288 matches found
CVE-2020-25476
Liferay CMS Portal version 7.1.3 and 7.2.1 have a blind persistent cross-site scripting XSS vulnerability in the user name parameter to Calendar. An attacker can insert the malicious payload on the username, lastname or surname fields of its own profile, and the malicious payload will be injected...
CVE-2020-25476
Liferay CMS Portal version 7.1.3 and 7.2.1 have a blind persistent cross-site scripting XSS vulnerability in the user name parameter to Calendar. An attacker can insert the malicious payload on the username, lastname or surname fields of its own profile, and the malicious payload will be injected...
FUEL CMS SQL注入漏洞
FUEL CMS is a content management system based on CodeIgniter. FUEL CMS 1.4.11 suffers from a SQL injection vulnerability. The vulnerability can be exploited by an attacker via the 'name' parameter in /fuel/permissions/create/ to compromise an application, access or modify data, or exploit a...
CVE-2020-35707
Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen...
CVE-2020-35705
Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen...
Cross site scripting
Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen...
Cross site scripting
Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen...
CVE-2020-35705
The CVE-2020-35705 entry affects Daybyday 2.1.0, where a stored XSS vulnerability exists in the New User screen via the Name parameter. The issue is documented across multiple feeds, with CVSSv3.1 base score 5.4 (MEDIUM) and CVSSv2 base score 3.5 (LOW) indicating the impact is limited to confiden...
CVE-2020-35707
Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen...
Bottelet Daybyday Crm Cross-Site Scripting Vulnerability
Bottelet Daybyday Crm is a builder system for task, time, employee, and vacation management by Bottelet Personal Developers. A cross-site scripting vulnerability exists in Bottelet Daybyday Crm 2.1.0, which allows storing XSS via the company name parameter to a new client screen...
Egavilanmedia User Registration & Login System Cross-Site Scripting Vulnerability
Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A cross-site scripting vulnerability exists in EGavilanMedia User Registration and Login System With Admin Panel 1.0. The vulnerability stems from the full name paramet...
CVE-2020-35252
Cross Site Scripting XSS vulnerability via the 'Full Name' parameter in the User Registration section of User Registration & Login System with Admin Panel 1.0...
Cross site scripting
Cross Site Scripting XSS vulnerability via the 'Full Name' parameter in the User Registration section of User Registration & Login System with Admin Panel 1.0...
Egavilanmedia User Registration & Login System 跨站脚本漏洞
Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A cross-site scripting vulnerability exists in EGavilanMedia User Registration and Login System With Admin Panel 1.0. The vulnerability stems from the full name paramet...
CVE-2020-19527
iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DBNAME parameter to install/install.php...
idreamsoft iCMS Operating System Command Injection Vulnerability
idreamsoft iCMS is an open source content management system CMS based on PHP and MySQL. A security vulnerability exists in iCMS 7.0.14, which can be exploited by an attacker to install.php by executing arbitrary OS commands via shell metacharacters in the DB NAME parameter...
News Script PHP Pro Cross-Site Scripting Vulnerability
News Script PHP Pro is a PHP/MySQL based web script from Simple PHP Scripts for displaying news on your website. A cross-site scripting vulnerability exists in News Script PHP Pro 2.3. The vulnerability can be exploited to conduct cross-site scripting attacks via the editorname parameter...
CVE-2020-25474
SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting XSS vulnerability via the editorname parameter...
Simplephpscripts News Script PHP Pro 跨站脚本漏洞
News Script PHP Pro is a PHP/MySQL based web script from Simple PHP Scripts for displaying news on your website. A cross-site scripting vulnerability exists in News Script PHP Pro 2.3. The vulnerability can be exploited to conduct cross-site scripting attacks via the editorname parameter...