2541 matches found
CVE-2023-38066
In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads...
CVE-2023-38066
In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads...
Cross site scripting
In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads...
CVE-2023-38066
In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads...
CVE-2023-38066
In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads...
CVE-2023-38066
Summary (CVE-2023-38066) : JetBrains TeamCity versions prior to 2023.05.1 are affected by a reflected XSS vulnerability that can be triggered via the Referer header during artifact downloads. The issue is triggered in the web UI when user-supplied Referer data is reflected back, potentially enabl...
JetBrains TeamCity cross-site scripting vulnerabilities
JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A cross-site scripting vulnerability exists in...
CVE-2023-38066: Improper Neutralization of Input During Web Page Generation
In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads...
CVE-2019-25147: Improper Neutralization of Input During Web Page Generation
The Pretty Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via various IP headers as well as the referer header in versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping in the tracklink function. This makes it possible for...
PT-2023-11374
Name of the Vulnerable Software and Affected Versions Pretty Links plugin for WordPress versions up to, and including, 2.1.9 Description The issue arises from insufficient input sanitization and output escaping in the track link function, allowing unauthenticated attackers to inject arbitrary web...
Textpattern 4.8.8 Session Token Disclosure Vulnerability
Textpattern version 4.8.8 logs the session token in a GET request where it may end up getting disclosed in logs or via a referer. Title: textpattern-4.8.8 Session token in URL Vulnerability Author: nu11secur1ty Vendor: https://textpattern.com/ Software:...
WordPress Block Referer Spam Plugin <= 1.1.9.4 is vulnerable to Cross Site Scripting (XSS)
Software Block Referer Spam Type Plugin Vulnerable versions = 1.1.9.4 Fixed in 1.1.9.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32497 Patch priority Low CVSS severity Low 5.1 Developer Claim ownership PSID 9bfabf6d69ec Credits Taihei Shimamine...
CVE-2020-21038
Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php...
CVE-2020-21038
Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php...
CVE-2020-21038
Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php...
CVE-2020-21038
Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php...
CVE-2020-21038: URL Redirection to Untrusted Site
Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php...
PT-2023-11571 · Typecho · Typecho
Name of the Vulnerable Software and Affected Versions: Typecho versions 1.1 through 17.10.30-release Description: The issue is related to an open redirect vulnerability. It can be exploited via the referer parameter to the "Login.php" endpoint. Recommendations: For Typecho versions 1.1 through...
Typecho input validation vulnerability
typecho is a PHP blogging platform for typecho individual developers. It is simple and powerful. A security vulnerability exists in typecho version 1.1-17.10.30-release, which stems from a redirection vulnerability via the referer parameter of Login.php...