178 matches found
CVE-2024-54320
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in icdsoft ICDSoft Reseller Store icdsoft-reseller-store allows Reflected XSS.This issue affects ICDSoft Reseller Store: from n/a through = 2.4.5...
CVE-2024-54320
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in icdsoft ICDSoft Reseller Store icdsoft-reseller-store allows Reflected XSS.This issue affects ICDSoft Reseller Store: from n/a through = 2.4.5...
CVE-2024-54320 WordPress ICDSoft Reseller Store plugin<= 2.4.5 -Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in icdsoft ICDSoft Reseller Store icdsoft-reseller-store allows Reflected XSS.This issue affects ICDSoft Reseller Store: from n/a through = 2.4.5...
CVE-2024-54320 WordPress ICDSoft Reseller Store plugin<= 2.4.5 -Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in icdsoft ICDSoft Reseller Store icdsoft-reseller-store allows Reflected XSS.This issue affects ICDSoft Reseller Store: from n/a through = 2.4.5...
CVE-2024-54320
CVE-2024-54320: Reflected XSS in ICDSoft Reseller Store plugin for WordPress. Affected: ICDSoft Reseller Store
PT-2024-36203 · Cdsoft · Icdsoft Reseller Store
Name of the Vulnerable Software and Affected Versions: ICDSoft Reseller Store versions through 2.4.5 Description: The issue affects ICDSoft Reseller Store, allowing Reflected XSS due to improper neutralization of input during web page generation. This is a type of Cross-site Scripting...
WordPress plugin ICDSoft Reseller Store 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress ICDSoft Reseller Store plugin<= 2.4.5 -Reflected Cross Site Scripting (XSS) vulnerability
WordPress ICDSoft Reseller Store plugin= 2.4.5 -Reflected Cross Site Scripting XSS vulnerability discovered by hunter85 Patchstack Alliance in WordPress Plugin ICDSoft Reseller Store versions = 2.4.5...
PT-2024-5353 · Securepoint · Securepoint Utm
Name of the Vulnerable Software and Affected Versions: Securepoint UTM versions 11.5 through 12.6.4 Securepoint UTM Reseller Preview version 12.7.0 Description: The issue is related to the authentication system of Securepoint UTM, specifically with the handling of One-Time Password OTP keys. This...
Malicious code in flexfone-reseller (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 18122a6d33435c1fb53b974e49237f471236504fef75bb09e9f0fb41c399a463 The OpenSSF Package Analysis project identified 'flexfone-reseller' @ 100.0.5 npm as malicious. It is considered malicious because: - The packag...
CVE-2024-24130
Mail2World v12 Business Control Center was discovered to contain a reflected cross-site scripting XSS vulnerability via the Usr parameter at resellercenter/login.asp...
PT-2024-20284
Name of the Vulnerable Software and Affected Versions Mail2World version 12 Description A reflected cross-site scripting XSS issue was discovered in the Mail2World v12 Business Control Center. The issue is related to the Usr parameter at the "resellercenter/login.asp" endpoint. This allows for...
CVE-2024-24130
Mail2World v12 Business Control Center was discovered to contain a reflected cross-site scripting XSS vulnerability via the Usr parameter at resellercenter/login.asp...
CVE-2024-0186
A vulnerability classified as problematic has been found in HuiRan Host Reseller System up to 2.0.0. Affected is an unknown function of the file /user/index/findpass?do=4 of the component HTTP POST Request Handler. The manipulation leads to weak password recovery. It is possible to launch the...
CVE-2024-0186
A vulnerability classified as problematic has been found in HuiRan Host Reseller System up to 2.0.0. Affected is an unknown function of the file /user/index/findpass?do=4 of the component HTTP POST Request Handler. The manipulation leads to weak password recovery. It is possible to launch the...
Design/Logic Flaw
A vulnerability classified as problematic has been found in HuiRan Host Reseller System up to 2.0.0. Affected is an unknown function of the file /user/index/findpass?do=4 of the component HTTP POST Request Handler. The manipulation leads to weak password recovery. It is possible to launch the...
CVE-2024-0186
Summary: CVE-2024-0186 affects HuiRan Host Reseller System up to 2.0.0. The vulnerability is in an unknown function of the HTTP POST Request Handler at /user/index/findpass?do=4, enabling weak password recovery. Exploitation is described as remote with high attack complexity and a public exploit ...
CVE-2024-0186 HuiRan Host Reseller System HTTP POST Request password recovery
A vulnerability classified as problematic has been found in HuiRan Host Reseller System up to 2.0.0. Affected is an unknown function of the file /user/index/findpass?do=4 of the component HTTP POST Request Handler. The manipulation leads to weak password recovery. It is possible to launch the...
CVE-2024-0186 HuiRan Host Reseller System HTTP POST Request password recovery
A vulnerability classified as problematic has been found in HuiRan Host Reseller System up to 2.0.0. Affected is an unknown function of the file /user/index/findpass?do=4 of the component HTTP POST Request Handler. The manipulation leads to weak password recovery. It is possible to launch the...
HuiRan Host Reseller System Authorization Issues Vulnerability
HuiRan Host Reseller System is a host reseller system from HuiRan. An authorization issue vulnerability exists in HuiRan Host Reseller System version 2.0.0 and prior versions, which stems from the file /user/index/findpass?do=4 that can lead to weak password recovery...