Cross site scripting

Cross Site Scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL v.1.2 allows attackers to execute arbitrary code via a crafted payload injected into the search field...

CVE-2023-36940: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL v.1.2 allows attackers to execute arbitrary code via a crafted payload injected into the search field...

CVE-2023-36940

CVE-2023-36940 is an XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL v1.2. The issue arises from handling user input in the search field, allowing a crafted payload to be injected and potentially execute arbitrary code. Affected software is PHPGurukul Online Fire ...

CVE-2023-24493

A formula injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authenticated attacker could leverage the reporting system to export reports containing formulas, which would then require a victim to approve and execute on a...

CVE-2023-24493

A formula injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authenticated attacker could leverage the reporting system to export reports containing formulas, which would then require a victim to approve and execute on a...

CVE-2023-24493: Improper Input Validation

A formula injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authenticated attacker could leverage the reporting system to export reports containing formulas, which would then require a victim to approve and execute on a...

APTRS - Automated Penetration Testing Reporting System

APTRS Automated Penetration Testing Reporting System is an automated reporting tool in Python and Django. The tool allows Penetration testers to create a report directly without using the Traditional Docx file. It also provides an approach to keeping track of the projects and vulnerabilities...

CVE-2022-37253

Persistent cross-site scripting XSS in Crime Reporting System 1.0 allows a remote attacker to introduce arbitary Javascript via manipulation of an unsanitized POST parameter...

CVE-2022-37253

Persistent cross-site scripting XSS in Crime Reporting System 1.0 allows a remote attacker to introduce arbitary Javascript via manipulation of an unsanitized POST parameter...

Cross site scripting

Persistent cross-site scripting XSS in Crime Reporting System 1.0 allows a remote attacker to introduce arbitary Javascript via manipulation of an unsanitized POST parameter...

CVE-2022-37253

CVE-2022-37253 affects Crime Reporting System 1.0 with a persistent cross-site scripting (XSS) flaw. The root cause is an unsanitized POST parameter that allows a remote attacker to inject arbitrary Javascript. Documented variants across multiple sources confirm the issue and its exposure. Practi...

CVE-2022-37253

Persistent cross-site scripting XSS in Crime Reporting System 1.0 allows a remote attacker to introduce arbitary Javascript via manipulation of an unsanitized POST parameter...

Crime Reporting System 跨站脚本漏洞

Crime Reporting System is an online crime reporting system by the individual developer Tedmar Enoria. A security vulnerability exists in the Crime Reporting System version 1.0 that could allow a remote attacker to introduce arbitrary Javascript by manipulating unprocessed POST parameters...

PT-2022-23896 · Unknown · Crime Reporting System

Name of the Vulnerable Software and Affected Versions: Crime Reporting System version 1.0 Description: The issue allows a remote attacker to introduce arbitrary Javascript via manipulation of an unsanitized POST parameter, enabling persistent cross-site scripting XSS attacks. Recommendations: For...

CVE-2022-37253: Improper Neutralization of Input During Web Page Generation

Persistent cross-site scripting XSS in Crime Reporting System 1.0 allows a remote attacker to introduce arbitary Javascript via manipulation of an unsanitized POST parameter...

CVE-2022-34611

A cross-site scripting XSS vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "Contac " text field...

CVE-2022-34611

A cross-site scripting XSS vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "Contac " text field...

CVE-2022-34611

A cross-site scripting XSS vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "Contac " text field...

Cross site scripting

A cross-site scripting XSS vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "Contac " text field...

CVE-2022-34611

A cross-site scripting XSS vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "Contac " text field...