CVE-2019-17427

CVE-2019-17427 CVE-2019-17427 XSS دائم POC في Redmine قبل الإصدار 3.4.11 و 4.0.x قبل 4.0.4، توجد ثغرة XSS دائمة بسبب أخطاء تنسيق textile. توجد الثغرة بشكل أساسي في أي صفحة ويكي تستخدم تنسيق textile بشكل افتراضي. يمكنك استغلالها باستخدام pre parameter pre onfocusin=alert"pwnd" tabindex=1...

itsourcecode Student Transcript Processing System 代码注入漏洞

itsourcecode Student Transcript Processing System is itsourcecode open source a student transcript processing system . A code injection vulnerability exists in itsourcecode Student Transcript Processing System version 1.0, which originates from improper manipulation of the parameter pre in the fi...

CVE-2018-6006

SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter...

Sql injection

SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter...

PT-2006-5395 · Phprojekt · Phprojekt

Name of the Vulnerable Software and Affected Versions: PHProjekt version 0.6.1 Description: The issue allows remote attackers to execute arbitrary PHP code via the path pre parameter in several PHP files, including cm lib.inc.php, doc/br.edithelp.php, doc/de.edithelp.php, doc/ct.edithelp.php,...