CVE-2020-35985

A stored cross site scripting XSS vulnerability in the 'Global Lists" feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Name' parameter...

CVE-2020-35986

A stored cross site scripting XSS vulnerability in the 'Users Access Groups' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Name' parameter...

CVE-2020-35987

A stored cross site scripting XSS vulnerability in the 'Entities List' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Name' parameter...

CVE-2020-35987

A stored cross site scripting XSS vulnerability in the 'Entities List' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Name' parameter...

PT-2021-11895

Name of the Vulnerable Software and Affected Versions: Rukovoditel version 2.7.2 Description: A stored cross site scripting XSS issue in the 'Global Lists' feature allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Name parameter...

PT-2021-11897

Name of the Vulnerable Software and Affected Versions: Rukovoditel version 2.7.2 Description: A stored cross site scripting XSS issue in the 'Entities List' feature allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Name parameter...

CVE-2020-35985: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in the 'Global Lists" feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Name' parameter...

CVE-2020-35986: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in the 'Users Access Groups' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Name' parameter...

CVE-2020-35987: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in the 'Entities List' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Name' parameter...

PT-2021-11896

Name of the Vulnerable Software and Affected Versions: Rukovoditel version 2.7.2 Description: A stored cross site scripting XSS issue in the 'Users Access Groups' feature allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Name parameter...

Router cross-site scripting vulnerabilities

Rukovoditel is a free web-based open source project management application. A stored cross-site scripting vulnerability exists in the "Entity List" feature in Rukovoditel version 2.7.2, which can be exploited to execute arbitrary web script or HTML via the 'Name' parameter...

osTicket Cross-Site Scripting Vulnerability

osTicket is a widely used and trusted open source work order support ticket system. A cross-site scripting vulnerability exists in osTicket versions prior to 1.12.6. An attacker can exploit this vulnerability via the queue-name parameter in include/class.queue.php...

osTicket cross-site scripting vulnerability (CNVD-2021-48883)

osTicket is a widely used and trusted open source work order support ticket system. A cross-site scripting vulnerability exists in osTicket versions prior to 1.12.6. An attacker can exploit this vulnerability via the queue-name parameter in include/ajax.search.php...

CVE-2020-22608

Cross Site Scripting vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter to include/ajax.search.php...

CVE-2020-22608

Cross Site Scripting vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter to include/ajax.search.php...

CVE-2020-22609

Cross Site Scripting XSS vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter in include/class.queue.php...

Cross site scripting

Cross Site Scripting XSS vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter in include/class.queue.php...

CVE-2020-22609

Cross Site Scripting XSS vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter in include/class.queue.php...

CVE-2020-22608

Cross Site Scripting vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter to include/ajax.search.php...

CVE-2020-22607: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerabilty in LimeSurvey 4.1.11+200316 via the 1 name and 2 description parameters in application/controllers/admin/PermissiontemplatesController.php...