CVE-2021-40678: Improper Neutralization of Input During Web Page Generation

In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batchmanager&mode=unit...

CVE-2017-20043: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability was found in Navetti PricePoint 4.6.0.0 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting Persistent. The attack may be launched remotely. Upgrading to version 4.7.0.0 is able to address this...

phpList <= 3.2.6 Multiple Vulnerabilities

phpList is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phplist:phplist"; if description...

CVE-2018-25034: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability, which was classified as problematic, has been found in Thomson TCW710 ST5D.10.05. This issue affects some unknown processing of the file /goform/wlanPrimaryNetwork. The manipulation of the argument ServiceSetIdentifier with the input as part of POST Request leads to basic cross...

PT-2022-8050

Name of the Vulnerable Software and Affected Versions Thomson TCW710 version ST5D.10.05 Description A problematic issue has been identified, affecting an unknown part of the file /goform/RgDhcp. The manipulation of the PppUserName argument with the input alert1 as part of a POST Request leads to...

PT-2022-8047

Name of the Vulnerable Software and Affected Versions Thomson TCW710 version ST5D.10.05 Description A problematic issue was found in the software, affecting an unknown function of the file /goform/RGFirewallEL. The manipulation of the argument EmailAddress/SmtpServerName with the input alert1 as...

CVE-2018-25038: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been classified as problematic. This affects an unknown part of the file /goform/RgDhcp. The manipulation of the argument PppUserName with the input as part of POST Request leads to cross site scripting Persistent. It is possible to...

PT-2022-8049

Name of the Vulnerable Software and Affected Versions Thomson TCW710 version ST5D.10.05 Description A vulnerability was found in the file /goform/RgDdns, where the manipulation of the DdnsHostName argument with malicious input, such as alert1, as part of a POST request leads to cross-site scripti...

CVE-2018-25039: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been declared as problematic. This vulnerability affects unknown code of the file /goform/RgUrlBlock.asp. The manipulation of the argument BasicParentalNewKeyword with the input as part of POST Request leads to cross site scripting...

PT-2022-8048

Name of the Vulnerable Software and Affected Versions Thomson TCW710 version ST5D.10.05 Description A vulnerability has been found in an unknown functionality of the file /goform/RgTime. The manipulation of the argument TimeServer1, TimeServer2, or TimeServer3 with the input alert1 as part of a...

PT-2022-8051

Name of the Vulnerable Software and Affected Versions Thomson TCW710 version ST5D.10.05 Description A vulnerability was found in the file /goform/RgUrlBlock.asp, where the manipulation of the argument BasicParentalNewKeyword with the input alert1 as part of a POST Request leads to cross site...

CVE-2018-25037: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability was found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/RgDdns. The manipulation of the argument DdnsHostName with the input as part of POST Request leads to cross site scripting Persistent. The...

CVE-2018-25036: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability has been found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /goform/RgTime. The manipulation of the argument TimeServer1/TimeServer2/TimeServer3 with the input as part of POST Request leads to...

CVE-2018-25035: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability, which was classified as problematic, was found in Thomson TCW710 ST5D.10.05. Affected is an unknown function of the file /goform/RGFirewallEL. The manipulation of the argument EmailAddress/SmtpServerName with the input as part of POST Request leads to cross site scripting...

PT-2022-7909

Name of the Vulnerable Software and Affected Versions PHPList versions 3.2.6 Description A vulnerability was found in the Bounce Rule component of the /lists/admin/ file, which can lead to cross site scripting Persistent. The manipulation can be launched remotely. Recommendations For PHPList...

PT-2022-7907

Name of the Vulnerable Software and Affected Versions PHPList version 3.2.6 Description A vulnerability was found in the component List Name, affecting unknown code of the file /lists/admin/. The manipulation leads to cross site scripting Persistent and can be initiated remotely. Recommendations...

PT-2022-7908

Name of the Vulnerable Software and Affected Versions PHPList version 3.2.6 Description A problematic issue has been found in the Subscribe component of PHPList, affecting the processing of the file /lists/admin/. This leads to cross site scripting Persistent and can be initiated remotely...

CVE-2017-20035: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability, which was classified as problematic, has been found in PHPList 3.2.6. This issue affects some unknown processing of the file /lists/admin/ of the component Subscribe. The manipulation leads to cross site scripting Persistent. The attack may be initiated remotely. Upgrading to...

CVE-2017-20034: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability classified as problematic was found in PHPList 3.2.6. This vulnerability affects unknown code of the file /lists/admin/ of the component List Name. The manipulation leads to cross site scripting Persistent. The attack can be initiated remotely. Upgrading to version 3.3.1 is able t...

CVE-2017-20036: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability, which was classified as problematic, was found in PHPList 3.2.6. Affected is an unknown function of the file /lists/admin/ of the component Bounce Rule. The manipulation leads to cross site scripting Persistent. It is possible to launch the attack remotely. Upgrading to version...