450 matches found
Cross site scripting
Cross Site Scripting XSS vulnerability in mblog 3.5 via the nickname field to /settings/profile...
CVE-2020-19617
Cross Site Scripting XSS vulnerability in mblog 3.5 via the nickname field to /settings/profile...
CVE-2020-19617: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in mblog 3.5 via the nickname field to /settings/profile...
langhsu mblog 跨站脚本漏洞
Mblog is an open source Java blog system , support for multi-user , support for switching themes. Mblog 3.5 has a cross-site scripting vulnerability that can be exploited to inject arbitrary Web script or HTML via the nickname field in /settings/profile...
Monica Cross-Site Scripting Vulnerability
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the Nickname field...
CVE-2021-27559
The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...
CVE-2021-27559
The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...
Design/Logic Flaw
The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...
CVE-2021-27559
The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...
CVE-2021-27559
The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...
CVE-2021-27559
Monica 2.19.1 is affected by a stored XSS on the Contacts page via the Nickname field. The vulnerability is triggered when untrusted input is stored and later rendered in the page, potentially allowing script execution in the victim’s browser. The connected documents confirm the existence of this...
Monica 跨站脚本漏洞
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the Nickname field...
CVE-2021-27559: Improper Neutralization of Input During Web Page Generation
The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...
Red Discord Bot Cross-Site Scripting Vulnerability
Red Discord Bot is a modular robot written in Python by an individual developer. The bot software can be configured to perform different functions depending on the module. A security vulnerability exists in Red Discord Bot Dashboard that allows a mismatched user to inject code into the webserver...
BaserCMS Cross-Site Scripting Vulnerability (CNVD-2020-60477)
BaserCMS is an open source enterprise-level content management system cms. A cross-site scripting vulnerability exists in versions of baserCMS prior to 4.4.1. An attacker can exploit this vulnerability by entering a specially crafted nickname in a blog comment to execute arbitrary JavaScript...
CVE-2020-5302
MH-WikiBot an IRC Bot for interacting with the Miraheze API, had a bug that allowed any unprivileged user to access the steward commands on the IRC interface by impersonating the Nickname used by a privileged user as no check was made to see if they were logged in. The issue has been fixed in...
Design/Logic Flaw
MH-WikiBot an IRC Bot for interacting with the Miraheze API, had a bug that allowed any unprivileged user to access the steward commands on the IRC interface by impersonating the Nickname used by a privileged user as no check was made to see if they were logged in. The issue has been fixed in...
Mail.ru: [icq.com/people/*uin*/edit] Отсутствует фильтр и проверка на дубли в поле "Никнейм"
It was possible to create account with a same nickname wih existing one...
CVE-2020-1708
It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit th...