12 matches found
CVE-2026-36468
Cross-site Scripting XSS in index.php in CuteNews v.2.1.2 allows remote unauthenticated attackers to supply an arbitrarily named URL parameter key, with part of its name containing any URL-encoded common XSS payload such as "alert1...
EUVD-2026-83990
Cross-site Scripting XSS in index.php in CuteNews v.2.1.2 allows remote unauthenticated attackers to supply an arbitrarily named URL parameter key, with part of its name containing any URL-encoded common XSS payload such as "alert1...
CVE-2026-36468
A Cross-site Scripting (XSS) vulnerability exists in the index.php component of CuteNews v.2.1.2 . The root cause is the improper neutralization of input during web page generation , which allows remote unauthenticated attackers to supply an arbitrarily named URL parameter key. If this key contai...
CVE-2026-36468
Cross-site Scripting XSS in index.php in CuteNews v.2.1.2 allows remote unauthenticated attackers to supply an arbitrarily named URL parameter key, with part of its name containing any URL-encoded common XSS payload such as "alert1...
EUVD-2022-4304
Malicious code in bioql PyPI...
litemall 路径遍历漏洞
litemall is a small mall system for linlinjava individual developers. A path traversal vulnerability exists in litemall 1.8.0 and earlier versions, which stems from improper handling of the parameter key in the file /admin/storage/delete, which could lead to a path traversal attack...
Weitong Mall 注入漏洞
Weitong Mall Weitong Mall is a shopping mall system by fuyanglipengjun, an individual developer. Weitong Mall injection vulnerability exists, the vulnerability stems from the wrong operation of the parameter key in the file platform-admin/src/main/java/com/platform/controller/SysLogController.jav...
The vulnerability of the web_radiusSrv_dftParam_post() function in the microprogramming software for PLANET Technology allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the webRadiusSrvdftParampost function in the microprogramming software for PLANET Technology is related to buffer overflows in the stack during the processing of the radDftParamKey parameter. Exploiting this vulnerability could allow an attacker to compromise the...
PT-2024-36018 · Winnmp · Winnmp
Name of the Vulnerable Software and Affected Versions: WinNMP version 19.02 Description: A vulnerability has been discovered that allows for an XSS attack via the /tools/redis.php page, specifically in the k, hash, key, and p parameters. This could enable a remote user to submit a specially craft...
EasyImages Path Traversal Vulnerability
EasyImages is a thin wrapper on PIL by Jakub Cieslik individual developer. It is used for exploring, visualizing and sharing images. A path traversal vulnerability exists in icret EasyImages version 2.8.3, which stems from unknown code in app/hide.php that causes path traversal via the parameter...
piWallet SQL注入漏洞
piWallet is a popular secure open source online torrents wallet for jfm individual developers. piWallet suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter key resulting in sql injection...
