VTiger v7.0 CRM - 'To' Persistent XSS

Exploit Title: VTiger v7.0 CRM - 'To' Persistent XSS Date: 2020-11-18 Exploit Vulnerability-Lab Vendor Homepage: https://www.vtiger.com/open-source-crm/download-open-source/ Software Link: https://sourceforge.net/projects/vtigercrm/files/ Version: v7.0 Document Title: =============== VTiger v7.0...

CVE-2020-25833

CVE-2020-25833 concerns a persistent cross-site scripting vulnerability in Micro Focus IDOL, affecting all versions prior to 12.7. The connected documents confirm the vulnerability is a Persistent XSS issue in IDOL and describe the impact as enabling Persistent XSS attacks. The sources do not pro...

CVE-2020-25833

Persistent cross-Site Scripting vulnerability on Micro Focus IDOL product, affecting all version prior to version 12.7. The vulnerability could be exploited to perform Persistent XSS attack...

CVE-2020-25833: Improper Neutralization of Input During Web Page Generation

Persistent cross-Site Scripting vulnerability on Micro Focus IDOL product, affecting all version prior to version 12.7. The vulnerability could be exploited to perform Persistent XSS attack...

PT-2020-16233

Name of the Vulnerable Software and Affected Versions Micro Focus IDOL versions prior to 12.7 Description The issue is a Persistent cross-Site Scripting vulnerability that could be exploited to perform a Persistent XSS attack. Recommendations For versions prior to 12.7, update to version 12.7 or...

SugarCRM v6.5.18 - Contacts Persistent XSS Vulnerability

Document Title: =============== SugarCRM v6.5.18 - Contacts Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2249 Release Date: ============= 2020-11-16 Vulnerability Laboratory ID VL-ID: ====================================...

GHSA-HRFH-FP4X-CRRQ Persistent XSS in newsletter module in Shopware

Impact Persistent XSS in newsletter module Patches We recommend updating to the current version 5.6.9. You can get the update to 5.6.9 regularly via the Auto-Updater or directly via the download overview. For older versions you can use the Security Plugin:...

Persistent XSS in newsletter module in Shopware

Impact Persistent XSS in newsletter module Patches We recommend updating to the current version 5.6.9. You can get the update to 5.6.9 regularly via the Auto-Updater or directly via the download overview. For older versions you can use the Security Plugin:...

PT-2020-21096

Name of the Vulnerable Software and Affected Versions Shopware versions prior to 5.6.9 Description The issue is related to a Persistent XSS in the customer module. It is recommended to update to the current version to resolve the issue. Recommendations For versions prior to 5.6.9, update to versi...

PT-2020-21346

Name of the Vulnerable Software and Affected Versions Shopware versions prior to 5.6.9 Description The issue is related to a Persistent XSS in the newsletter module. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where...

PT-2020-20953

Name of the Vulnerable Software and Affected Versions Shopware versions prior to 5.6.9 Description The issue is related to a Persistent XSS in shopping worlds. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

Genexis Platinum-4410 - 'SSID' Persistent XSS

Exploit Title: Persistent XSS in SSID Date: 10/24/2020 Exploit Author: Amal Mohandas Vendor Homepage: https://genexis.co.in/product/ont/ Version: Platinum-4410 Software version - P4410-V2-1.28 Tested on: Windows 10 Vulnerability Details ====================== Genexis Platinum-4410 Home Gateway...

Stock Management System 1.0 - 'Categories Name' Persistent Cross-Site Scripting

Exploit Title: Stock Management System 1.0 - Persistent Cross-Site Scripting Categories Name Exploit Author: Adeeb Shah @hyd3sec Date: August 2, 2020 Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/14366/stock-management-system-php.html Version:...

User Registration And Login And User Management System 2.1 Cross Site Scripting

Exploit Title: User Registration & Login and User Management System With admin panel 2.1 - Persistent XSS Google Dork: N/A Date: 2020-08-07 Exploit Author: yusufmalikul Vendor Homepage: https://phpgurukul.com Software Link:...

WordPress Colorbox Lightbox 1.1.1 Cross Site Scripting

Exploit Title: WordPress Plugin Colorbox Lightbox v1.1.1 - Persistent Cross-Site Scripting Vulnerability Authenticated Date: 10.8.2020. Exploit Author: n1x MS-WEB Software Homepage: https://wordpress.org/plugins/wp-colorbox/ Software Link v1.1.1:...

Comtrend AR-5387un router - Persistent XSS (Authenticated)

!/usr/bin/env python3 -- coding: utf-8 -- """ Exploit Title: Persistent XSS on Comtrend AR-5387un router Date: 19/10/2020 Exploit Author: OscarAkaElvis Vendor Homepage: https://www.comtrend.com/ Version: Comtrend AR-5387un router Tested on: Software/Firmware version A731-410JAZ-C04R02.A2pD035g.d2...

User Registration & Login and User Management System With admin panel 2.1 - Persistent XSS

Exploit Title: User Registration & Login and User Management System With admin panel 2.1 - Persistent XSS Google Dork: N/A Date: 2020-08-07 Exploit Author: yusufmalikul Vendor Homepage: https://phpgurukul.com Software Link:...

CVE-2019-13633

Blinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS. An attacker can send arbitrary JavaScript code via a built-in communication channel, such as Telegram, WhatsApp, Viber, Skype, Facebook, Vkontakte, or Odnoklassniki. This is mishandled within the administration panel for...

CVE-2019-13633

Blinger.io v1.0.2519 is vulnerable to Blind/Persistent XSS. An attacker can inject arbitrary JavaScript through built-in communication channels (Telegram, WhatsApp, Viber, Skype, Facebook, Vkontakte, Odnoklassniki), with exploitation impacting the admin-conversation panels: /conversations/all, /c...

CVE-2019-13633

Blinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS. An attacker can send arbitrary JavaScript code via a built-in communication channel, such as Telegram, WhatsApp, Viber, Skype, Facebook, Vkontakte, or Odnoklassniki. This is mishandled within the administration panel for...