102 matches found
CVE-2025-6699: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in LabRedesCefetRJ WeGIA 3.4.0. This affects an unknown part of the file /html/funcionario/cadastrofuncionario.php of the component Cadastro de Funcionário. The manipulation of the argument Nome/Sobrenome leads to cross site scripting. It i...
CVE-2025-6696: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0. It has been classified as problematic. Affected is an unknown function of the file /html/atendido/CadastroAtendido.php of the component Cadastro de Atendio. The manipulation of the argument Nome/Sobrenome leads to cross site scripting. It ...
WeGIA 跨站脚本漏洞
WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A cross-site scripting vulnerability exists in WeGIA versions prior to 3.2.10, which stems from a stored cross-site scripting vulnerability in the socionome parameter that allows injection of malicious...
WeGIA 跨站脚本漏洞
WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A cross-site scripting vulnerability exists in WeGIA version 2.3.6, which stems from a stored cross-site scripting vulnerability contained in the nome parameter of the adicionaralergia.php page...
PT-2025-4777 · Wegia · Wegia
Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.6 Description: A Stored Cross-Site Scripting XSS issue was identified in the adicionar alergia.php endpoint of the WeGIA application. This issue allows attackers to inject malicious scripts into the nome parameter...
PT-2025-4600 · Wegia · Wegia
Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.6 Description: A Stored Cross-Site Scripting XSS vulnerability was identified in the dependente editarInfoPessoal.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scrip...
WeGIA 跨站脚本漏洞
WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. WeGIA has a cross-site scripting vulnerability that stems from a stored cross-site scripting vulnerability contained in the nome and SobrenomeForm parameters of the dependenteeditarInfoPessoal.php file...
Farmacia 代码注入漏洞
Farmacia is a content management system from code-projects. A code injection vulnerability exists in code-projects Farmacia version 1.0, which stems from a cross-site scripting vulnerability contained in the nome/cpf/dataNascimento parameter of the /adicionar-cliente.php file...
PT-2023-16029 · Unknown · Control Id Panel +1
Name of the Vulnerable Software and Affected Versions: Control iD Gerencia Web version 1.30 Control iD Panel affected versions not specified Description: A vulnerability was found in the Web Interface component, where the manipulation of the Nome argument leads to cross-site scripting. The attack...
Control iD Panel 跨站脚本漏洞
Control iD Panel is a web application. Control iD Panel suffers from a cross-site scripting vulnerability that stems from incorrect manipulation of the Nome parameter leading to cross-site scripting...
LAquis SCADA Web Server relatorionome NOME Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to relatorionome.lhtml. When parsing the NOME Element, t...
OPAC EasyWeb Five 5.7 nome SQL Injection
Exploit Title: OPAC EasyWeb Five 5.7 - 'nome' SQL Injection Dork: N/A Exploit Author: Ihsan Sencan Date: 2018-10-02 Vendor Homepage: http://www.nexusfi.it/ Software Link: http://www.nexusfi.it/easyweb.php Version: 5.7 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A POC: 1 POST...
Cross site scripting
Matera Banco 1.0.0 is vulnerable to multiple stored XSS, as demonstrated by the sca/privilegio/consultarUsuario.jsf "Nome Completo" aka user fullname field...
CVE-2018-14924
Matera Banco 1.0.0 is vulnerable to multiple stored XSS, as demonstrated by the sca/privilegio/consultarUsuario.jsf "Nome Completo" aka user fullname field...
CVE-2018-14924
Matera Banco 1.0.0 is vulnerable to multiple stored XSS, as demonstrated by the sca/privilegio/consultarUsuario.jsf "Nome Completo" aka user fullname field...
CVE-2018-14924
CVE-2018-14924 affects Matera Banco 1.0.0. The connected sources describe a stored XSS in the application, exploitable via the sca/privilegio/consultarUsuario.jsf “Nome Completo” field. CNVD notes a remote attacker can inject arbitrary script/HTML, consistent with stored XSS. No patch/version rem...
E-Sic Cross-Site Scripting Vulnerability
E-Sic is a Brazilian electronic system for citizen information. A cross-site scripting vulnerability exists in E-Sic version 1.0. A remote attacker could exploit this vulnerability by injecting arbitrary Web script or HTML with the 'nome' parameter...
donationitalia.org XSS vulnerability
Open Bug Bounty ID: OBB-575588 Description| Value ---|--- Affected Website:| donationitalia.org Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...
