Lucene search
+L

33 matches found

NVD
NVD
•added 2022/11/17 11:15 p.m.•68 views

CVE-2022-39181

GLPI - Reports plugin for GLPI Reflected Cross-Site-Scripting RXSS. Type 1: Reflected XSS or Non-Persistent - The server reads data directly from the HTTP request and reflects it back in the HTTP response. Reflected XSS exploits occur when an attacker causes a victim to supply dangerous content t...

6.1CVSS0.00384EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/11/17 11:15 p.m.•18 views

CVE-2022-39181

GLPI - Reports plugin for GLPI Reflected Cross-Site-Scripting RXSS. Type 1: Reflected XSS or Non-Persistent - The server reads data directly from the HTTP request and reflects it back in the HTTP response. Reflected XSS exploits occur when an attacker causes a victim to supply dangerous content t...

6.1CVSS5.6AI score0.00384EPSS
SaveExploits0References1
Prion
Prion
•added 2022/11/17 11:15 p.m.•33 views

Cross site scripting

GLPI - Reports plugin for GLPI Reflected Cross-Site-Scripting RXSS. Type 1: Reflected XSS or Non-Persistent - The server reads data directly from the HTTP request and reflects it back in the HTTP response. Reflected XSS exploits occur when an attacker causes a victim to supply dangerous content t...

5.8CVSS6AI score0.00384EPSS
SaveExploits0References1
CVE
CVE
•added 2022/11/17 10:27 p.m.•120 views

CVE-2022-39181

CVE-2022-39181 affects the GLPI system’s Reports plugin . Multiple connected sources confirm a Reflected XSS (RXSS) vulnerability caused by the server’s failure to properly neutralize input data during web page generation, enabling an attacker to reflect crafted input in the HTTP response and tri...

6.1CVSS6.1AI score0.00384EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/11/17 10:27 p.m.•65 views

CVE-2022-39181 GLPI - Reports plugin for GLPI Reflected Cross-Site-Scripting (RXSS)

GLPI - Reports plugin for GLPI Reflected Cross-Site-Scripting RXSS. Type 1: Reflected XSS or Non-Persistent - The server reads data directly from the HTTP request and reflects it back in the HTTP response. Reflected XSS exploits occur when an attacker causes a victim to supply dangerous content t...

6.1CVSS6.2AI score0.00384EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/17 12:00 a.m.•6 views

CVE-2022-39181: Improper Neutralization of Input During Web Page Generation

GLPI - Reports plugin for GLPI Reflected Cross-Site-Scripting RXSS. Type 1: Reflected XSS or Non-Persistent - The server reads data directly from the HTTP request and reflects it back in the HTTP response. Reflected XSS exploits occur when an attacker causes a victim to supply dangerous content t...

6.1CVSS5.7AI score0.00384EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•14 views

WordPress WooCommerce Quick Reports plugin <= 2.7.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce Quick Reports plugin versions = 2.7.1. Solution No patched version available...

4.4AI score
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2021/10/24 12:00 a.m.•33 views

WordPress MainWP Child Reports plugin SQL injection vulnerability

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress MainWP Child Reports plugin has a SQL injection vulnerability in versions prior to 2.0.8, which stems...

7.2CVSS2.9AI score0.01371EPSS
SaveExploits2References1
Prion
Prion
•added 2019/03/07 11:29 p.m.•30 views

Cross site scripting

An issue was discovered in Dolibarr through 7.0.0. There is Stored XSS in expensereport/card.php in the expense reports plugin via the comments parameter, or a public or private note...

4.3CVSS5.9AI score0.0098EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2019/03/07 10:00 p.m.•6 views

CVE-2018-16808

An issue was discovered in Dolibarr through 7.0.0. There is Stored XSS in expensereport/card.php in the expense reports plugin via the comments parameter, or a public or private note...

6.1CVSS0.0098EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2019/03/07 12:00 a.m.•8 views

PT-2019-9375

Name of the Vulnerable Software and Affected Versions Dolibarr versions prior to 7.0.1 Description The issue concerns Stored XSS in the expense reports plugin. It occurs via the comments parameter, or a public or private note, in the expensereport/card.php file. Recommendations For versions prior...

6.1CVSS0.0098EPSS
SaveExploits1References8
CNVD
CNVD
•added 2016/07/29 12:00 a.m.•15 views

CloudBees Jenkins Cucumber Reports Plugin Security Bypass Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Jenkin...

6.8AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2012/04/02 12:00 a.m.•31 views

Fedora Update for abrt FEDORA-2011-16990

Check for the Version of abrt OpenVAS Vulnerability Test Fedora Update for abrt FEDORA-2011-16990 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

7.5AI score0.01616EPSS
SaveExploits0References2
Rows per page
Query Builder