JVN#66542874: Multiple cross-site scripting vulnerabilities in Movable Type

Movable Type provided by Six Apart Ltd. contains multiple cross-site scripting vulnerabilities listed below. Cross-site scripting vulnerability in Role authority setting screen CWE-79 - CVE-2021-20663 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base...

SpotAuditor 5.3.5 - (multiple) Denial Of Service Exploit

Exploit Title: SpotAuditor 5.3.5 - 'multiple' Denial Of Service PoC Exploit Author : Sinem Şahin Vendor Homepage : http://www.nsauditor.com/ Link Software : http://spotauditor.nsauditor.com/downloads/spotauditorsetup.exe Tested on: Windows 7 x64 Version: 5.3.5 Steps: 1- Run the python script...

File upload vulnerability in waychar enrollment system (CNVD-2021-16014)

The waychar registration system is a tournament official website deployment service that enables one-stop deployment of official websites. A file upload vulnerability exists in the waychar registration system, which can be exploited by an attacker to gain server control privileges...

Product Key Explorer 4.2.7 Denial Of Service

Exploit Title: Product Key Explorer 4.2.7 - 'multiple' Denial of Service PoC Exploit Author : Sinem Şahin Exploit Date: 2021-02-23 Vendor Homepage : http://www.nsauditor.com/ Link Software : http://www.nsauditor.com/downloads/productkeyexplorersetup.exe Version: 4.2.7 Tested on: Windows 7 x64...

The vulnerability of the registration process for certificates in the Cisco Unified Computing System Central system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Cisco Unified Computing System Central device registration process is related to errors in verifying the authenticity of the certificates. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Waychar enrollment system has a flawed logic vulnerability

Waychar Registration System is an online registration system developed for sporting events and other general purpose activities. A logic flaw vulnerability exists in the Waychar registration system. An attacker can exploit this vulnerability to spoof an administrator login by modifying the value ...

CVE-2020-28645

CVE-2020-28645 affects the ownCloud Core before version 10.6. The issue, described as deleting users with certain names causing system files to be deleted, implies a vulnerability in user handling where specific usernames trigger file deletions when data directories are web-rooted. The available ...

CVE-2021-26719

A directory traversal issue was discovered in Gradle gradle-enterprise-test-distribution-agent before 1.3.2, test-distribution-gradle-plugin before 1.3.2, and gradle-enterprise-maven-extension before 1.8.2. A malicious actor with certain credentials can perform a registration step such that craft...

CVE-2021-26719

A directory traversal issue was discovered in Gradle gradle-enterprise-test-distribution-agent before 1.3.2, test-distribution-gradle-plugin before 1.3.2, and gradle-enterprise-maven-extension before 1.8.2. A malicious actor with certain credentials can perform a registration step such that craft...

UBUNTU-CVE-2021-26719

A directory traversal issue was discovered in Gradle gradle-enterprise-test-distribution-agent before 1.3.2, test-distribution-gradle-plugin before 1.3.2, and gradle-enterprise-maven-extension before 1.8.2. A malicious actor with certain credentials can perform a registration step such that craft...

CVE-2020-26052

Online Marriage Registration System 1.0 is affected by stored cross-site scripting XSS vulnerabilities in multiple parameters...

CVE-2020-26052

Online Marriage Registration System 1.0 is affected by stored cross-site scripting XSS vulnerabilities in multiple parameters...

Cross site scripting

Online Marriage Registration System 1.0 is affected by stored cross-site scripting XSS vulnerabilities in multiple parameters...

CVE-2020-26052

CVE-2020-26052 affects Online Marriage Registration System 1.0 with stored cross-site scripting (XSS) vulnerabilities in multiple parameters. The NVD entry lists both CVSSv2 (3.5, LOW) and CVSSv3.1 (5.4, MEDIUM) scores. PT-2021-11211 describes stored XSS in multiple parameters and notes a lack of...

CVE-2020-26052

Online Marriage Registration System 1.0 is affected by stored cross-site scripting XSS vulnerabilities in multiple parameters...

Phpgurukul Online Marriage Registration System Cross-Site Scripting Vulnerability

Phpgurukul Online Marriage Registration System is a website builder from the Phpgurukul team that supports online marriage registration. A cross-site scripting vulnerability exists in Phpgurukul Online Marriage Registration System, which stems from a lack of proper validation of client-side data ...

PT-2021-11211 · Unknown · The Online Marriage Registration System

Name of the Vulnerable Software and Affected Versions: Online Marriage Registration System version 1.0 Description: The issue is related to stored cross-site scripting XSS vulnerabilities in multiple parameters. This means that an attacker can inject malicious scripts into the system, which are...

Unauthorized Access Vulnerability in Waychar Enrollment System

Waychar Registration System is an online registration system developed for sporting events and other general purpose activities. An unauthorized access vulnerability exists in the Waychar registration system, which can be exploited by attackers to obtain sensitive information...

CVE-2021-1354

A vulnerability in the certificate registration process of Cisco Unified Computing System UCS Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager UCSM. This vulnerability is due to improper certificate validation. An attacker...

Input validation

A vulnerability in the certificate registration process of Cisco Unified Computing System UCS Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager UCSM. This vulnerability is due to improper certificate validation. An attacker...