25 matches found
EUVD-2021-30593
Malicious code in bioql PyPI...
EUVD-2022-4103
Malicious code in bioql PyPI...
GHSA-H847-63FG-VM6C nZEDb Cross-site Scripting (XSS) in the 404 error page
nZEDb before 0.8.0.0 has XSS in the 404 error page...
nZEDb Cross-site Scripting (XSS) in the 404 error page
nZEDb before 0.8.0.0 has XSS in the 404 error page...
CVE-2021-43686
nZEDb v0.4.20 is affected by a Cross Site Scripting XSS vulnerability in www/pages/api.php. The exit function will terminate the script and print the message which has the input $GET't'...
CVE-2021-43686
nZEDb v0.4.20 is affected by a Cross Site Scripting XSS vulnerability in www/pages/api.php. The exit function will terminate the script and print the message which has the input $GET't'...
CVE-2021-43686
nZEDb v0.4.20 is affected by a Cross Site Scripting XSS vulnerability in www/pages/api.php. The exit function will terminate the script and print the message which has the input $GET't'...
Cross site scripting
nZEDb v0.4.20 is affected by a Cross Site Scripting XSS vulnerability in www/pages/api.php. The exit function will terminate the script and print the message which has the input $GET't'...
CVE-2021-43686
nZEDb v0.4.20 is affected by a Cross Site Scripting XSS vulnerability in www/pages/api.php. The exit function will terminate the script and print the message which has the input $GET't'...
CVE-2021-43686
nZEDb v0.4.20 is affected by a Cross Site Scripting XSS vulnerability in www/pages/api.php. The exit function will terminate the script and print the message which has the input $GET't'...
CVE-2021-43686
CVE-2021-43686 affects nZEDb v0.4.20. The vulnerability is a Cross Site Scripting (XSS) in www/pages/api.php where the exit function terminates the script and prints the value provided via the input parameter $_GET['t']. The root cause is improper handling/filtering of input data in that path, en...
PT-2021-23912
Name of the Vulnerable Software and Affected Versions: nZEDb version 0.4.20 Description: The issue is related to a Cross Site Scripting XSS vulnerability in the www/pages/api.php file. The exit function terminates the script and prints a message that includes the input from $ GET't'. This allows...
CVE-2021-43686: Improper Neutralization of Input During Web Page Generation
nZEDb v0.4.20 is affected by a Cross Site Scripting XSS vulnerability in www/pages/api.php. The exit function will terminate the script and print the message which has the input $GET't'...
Nzedb 跨站脚本漏洞
Nzedb is a newsgroup indexer. A cross-site scripting vulnerability exists in NZEDb that stems from the exit function in the product www/pages/api.php file not effectively filtering input data. The vulnerability allows an attacker to print a $GETt message. The following products and versions are...
Cross-site Scripting (XSS)
nzedb/nzedb is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of sanitization of the page variable in the rendered 404 page, causing arbitrary scripts to execute...
CVE-2017-18286
nZEDb v0.7.3.3 has XSS in the 404 error page...
CVE-2017-18286
nZEDb v0.7.3.3 has XSS in the 404 error page...
Cross site scripting
nZEDb v0.7.3.3 has XSS in the 404 error page...