PT-2022-6551 · Fortinet · Fortiauthenticator

Name of the Vulnerable Software and Affected Versions: FortiAuthenticator versions 6.1 through 6.4.4 Description: The issue is related to the improper neutralization of script-related HTML tags in a web page, which may allow a remote unauthenticated attacker to trigger a reflected cross site...

CVE-2022-24681

Zoho ManageEngine ADSelfService Plus before 6121 allows XSS via the welcome name attribute to the Reset Password, Unlock Account, or User Must Change Password screen...

Zoho Corporation ADSelfService Plus 跨站脚本漏洞

Zoho Corporation ADSelfService Plus is a single management platform from Zoho Corporation, Inc. for complete self-service password management. Zoho Corporation ADSelfService Plus suffers from a cross-site scripting vulnerability that originates from Reset Password, Unlock Account and User Must...

D-Link Dsl-2730E Cross-Site Scripting Vulnerability

D-Link Dsl-2730E is a wireless modem router from D-Link, China. D-Link DSL-2730E CT-20131125 is vulnerable to a cross-site scripting vulnerability that allows XSS to access the password page in the maintenance configuration via the username parameter. No details of the vulnerability are currently...

CVE-2021-46108

D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance configuration...

CVE-2021-46108

D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance configuration...

CVE-2021-46108

D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance configuration...

D-Link Dsl-2730E 跨站脚本漏洞

D-Link Dsl-2730E is a wireless modem router from D-Link, China. D-Link DSL-2730E CT-20131125 is vulnerable to a cross-site scripting vulnerability that allows XSS to access the password page in the maintenance configuration via the username parameter. No details of the vulnerability are currently...

Cacti 跨站脚本漏洞

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. Cacti suffers from a cross-site scripting vulnerability that allows an...

Yonyou TurboCrm SQL注入漏洞

Yonyou TurboCrm is a customer relationship management system from China's UFIDA Network Technology Yonyou. Yonyou TurboCRM.via suffers from a SQL injection vulnerability that allows an attacker to obtain sensitive database information via the orgcode parameter in changepswd.php...

UBUNTU-CVE-2021-21319

Galette is a membership management web application geared towards non profit organizations. In versions prior to 0.9.5, malicious javascript code can be stored to be displayed later on self subscription page. The self subscription feature can be disabled as a workaround this is the default state...

PHPGurukul Hospital Management System SQL注入漏洞

PHPGurukul Hospital Management System is a web application for hospitals to manage doctors and patients. A SQL injection vulnerability exists in \hms\forgot-password.php in PHPGurukul Hospital Management System version 4.0. An attacker can exploit this vulnerability to obtain sensitive informatio...

CVE-2021-26832

Cross Site Scripting XSS in the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attackers to execute javascript on behalf of the victim by sending a malicious URL or directing the victim to a malicious site...

Priority Software Priority Enterprise Management System 跨站脚本漏洞

Priority Software Priority Enterprise Management System is an application from Priority Software, Inc. An intelligent ERP platform for managing organizations in the cloud. A cross-site scripting vulnerability exists in Priority Enterprise Management System version v8.00, which originates from the...

Online Shopping Portal 3.1 - (email) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Online Shopping Portal 3.1 - 'email' SQL Injection Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage: https://phpgurukul.com/shopping-portal-free-download/ Softwa...

CVE-2019-6696

An improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0 under admin webUI may allow an attacker to perform an URL redirect attack via a specifically crafted request to the admin initial password change webpage...

Cross site scripting

Frog CMS 0.9.5 allows XSS via the forgot password page aka the /admin/?/login/forgot URI...

CVE-2019-6243

Frog CMS 0.9.5 allows XSS via the forgot password page aka the /admin/?/login/forgot URI...

CVE-2019-6243

Frog CMS 0.9.5 allows XSS via the forgot password page aka the /admin/?/login/forgot URI...

CVE-2019-6243

CVE-2019-6243 affects Frog CMS 0.9.5 with a cross-site scripting (XSS) vulnerability exposed via the forgot password page (the /admin/?/login/forgot URI). The issue is confirmed across multiple sources (NVD entry and CNVD/CVEs references) and is limited to input handling on the forgot-password fl...