47 matches found
UBUNTU-CVE-2022-48547
A reflected cross-site scripting XSS vulnerability in Cacti 0.8.7g and earlier allows unauthenticated remote attackers to inject arbitrary web script or HTML in the "ref" parameter at authchangepassword.php...
Cacti 跨站脚本漏洞
Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. A cross-site scripting vulnerability exists in Cacti 0.8.7g and earlier...
PT-2023-5430 · Cacti · Cacti
Name of the Vulnerable Software and Affected Versions: Cacti versions 0.8.7g and earlier Description: A reflected cross-site scripting XSS vulnerability allows unauthenticated remote attackers to inject arbitrary web script or HTML in the ref parameter at "auth changepassword.php". This issue is...
CVE-2022-48547: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability in Cacti 0.8.7g and earlier allows unauthenticated remote attackers to inject arbitrary web script or HTML in the "ref" parameter at authchangepassword.php...
SUSE CVE-2021-26247
As an unauthenticated remote user, visit "http:///authchangepassword.php?ref=alert1" to successfully execute the JavaScript payload present in the "ref" URL parameter...
CVE-2021-26247
As an unauthenticated remote user, visit "http:///authchangepassword.php?ref=" to successfully execute the JavaScript payload present in the "ref" URL parameter...
UBUNTU-CVE-2021-26247
As an unauthenticated remote user, visit "http:///authchangepassword.php?ref=alert1" to successfully execute the JavaScript payload present in the "ref" URL parameter...
Cacti 跨站脚本漏洞
Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. Cacti suffers from a cross-site scripting vulnerability that allows an...
CVE-2021-20105
Machform prior to version 16 is vulnerable to an open redirect in Safariinit.php due to an improperly sanitized 'ref' parameter...
CVE-2021-20105
Machform prior to version 16 is vulnerable to an open redirect in Safariinit.php due to an improperly sanitized 'ref' parameter...
CVE-2021-20105: URL Redirection to Untrusted Site
Machform prior to version 16 is vulnerable to an open redirect in Safariinit.php due to an improperly sanitized 'ref' parameter...
Machform 输入验证错误漏洞
MachForm is an HTML form builder that lets you create contact forms, surveys, order forms or any other web form without writing code. An open redirect vulnerability exists in Safariinit.php in versions prior to Machform 16. The vulnerability stems from improper validation of the ref parameter. An...
PT-2021-3482
Name of the Vulnerable Software and Affected Versions Machform versions prior to 16 Description The issue is related to an open redirect vulnerability in the Safari init.php file of the Machform form creation editor. This vulnerability is caused by the improper sanitization of the ref parameter...
CVE-2021-33562
A reflected cross-site scripting XSS vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via the ref parameter to a page about an arbitrary product, e.g., a product/insert-product-name-here.html/ref= URL...
Shopizer 跨站脚本漏洞
Shopizer is a Java open source e-commerce software. A cross-site scripting vulnerability exists in Shopizer versions prior to 2.17.0. A remote attacker can exploit this vulnerability by using the ref parameter to inject arbitrary Web script or HTML into a page about any product...
Shopizer 2.16.0 - (Multiple) Cross-Site Scripting Vulnerability
Exploit Title: Shopizer 2.16.0 - 'Multiple' Cross-Site Scripting XSS Exploit Author: Marek Toth Vendor Homepage: https://www.shopizer.com Software Link: https://github.com/shopizer-ecommerce/shopizer Version: alert1 and save it 4. Open "Customers" - XSS payload will trigger Reflected XSS - 'ref'...
CVE-2021-33562: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via the ref parameter to a page about an arbitrary product, e.g., a product/insert-product-name-here.html/ref= URL...
CVE-2017-17737
The BrightSign Digital Signage 4k242 device Firmware 6.2.63 and below has XSS via the REF parameter to /networkdiagnostics.html or /storageinfo.html...
