111 matches found
CVE-2021-41765
Affected software : ResourceSpace 9.5–9.6 (rev 18274). Vulnerability : SQL injection in pages/edit_fields/9_ajax/add_keyword.php allows remote unauthenticated attackers to run arbitrary SQL commands via the k parameter. This can reveal the full contents of the ResourceSpace database and, if an ad...
CVE-2021-41765
A SQL injection issue in pages/editfields/9ajax/addkeyword.php of ResourceSpace 9.5 and 9.6 rev 18274 allows remote unauthenticated attackers to execute arbitrary SQL commands via the k parameter. This allows attackers to uncover the full contents of the ResourceSpace database, including user...
CVE-2021-41951
ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability in plugins/wordpresssso/pages/index.php via the wordpressuser parameter. If an attacker is able to persuade a victim to visit a crafted URL, malicious JavaScript content may be executed within the...
CVE-2021-41951
ResourceSpace (by Montala Limited) before version 9.6 rev 18290 is vulnerable to a reflected Cross-Site Scripting (XSS) flaw in the plugins/wordpress_sso/pages/index.php component. The root cause is improper input validation of the wordpress_user parameter. An attacker can trick a victim into vis...
CVE-2021-41951
ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability in plugins/wordpresssso/pages/index.php via the wordpressuser parameter. If an attacker is able to persuade a victim to visit a crafted URL, malicious JavaScript content may be executed within the...
CVE-2021-41950: Improper Limitation of a Pathname to a Restricted Directory
A directory traversal issue in ResourceSpace 9.6 before 9.6 rev 18277 allows remote unauthenticated attackers to delete arbitrary files on the ResourceSpace server via the provider and variant parameters in pages/ajax/tiles.php. Attackers can delete configuration or source code files, causing the...
CVE-2021-41765: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection issue in pages/editfields/9ajax/addkeyword.php of ResourceSpace 9.5 and 9.6 rev 18274 allows remote unauthenticated attackers to execute arbitrary SQL commands via the k parameter. This allows attackers to uncover the full contents of the ResourceSpace database, including user...
CVE-2021-41951: Improper Neutralization of Input During Web Page Generation
ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability in plugins/wordpresssso/pages/index.php via the wordpressuser parameter. If an attacker is able to persuade a victim to visit a crafted URL, malicious JavaScript content may be executed within the...
PT-2021-23456 · Unknown · Resourcespace
Name of the Vulnerable Software and Affected Versions: ResourceSpace versions 9.6 through 9.6 rev 18277 Description: A directory traversal issue allows remote unauthenticated attackers to delete arbitrary files on the server via the provider and variant parameters in "pages/ajax/tiles.php"...
Montala ResourceSpace Cross-site Scripting Vulnerability
ResourceSpace is a digital asset management tool that enables users to organize their digital assets. cross-site scripting exists in the wordpressuser parameter in plugins/wordpresssso/pages/index.php in versions prior to ResourceSpace 9.6 rev 18290 vulnerability. An attacker could exploit this...
Montala ResourceSpace SQL Injection Vulnerability
ResourceSpace is a digital asset management tool that enables users to organize their digital assets. a SQL injection vulnerability exists in pages/editfields/9ajax/addkeyword.php in ResourceSpace. The vulnerability can be exploited by an attacker to execute arbitrary SQL commands via the k...
Montala ResourceSpace path traversal vulnerability
ResourceSpace is a digital asset management tool that enables users to organize their digital assets. a directory traversal vulnerability exists in ResourceSpace. An attacker could exploit the vulnerability to delete arbitrary files on the ResourceSpace server via the provider and variant...
PT-2021-23457 · Unknown · Resourcespace
Name of the Vulnerable Software and Affected Versions: ResourceSpace versions prior to 9.6 rev 18290 Description: The issue allows for malicious JavaScript content to be executed within the context of a victim's browser, due to a reflected Cross-Site Scripting vulnerability. This can occur when a...
ResourceSpace 8.6 - watched_searches.php SQL Injection
ResourceSpace 8.6 - watchedsearches.php SQL Injection Exploit Title: ResourceSpace =8.6 'watchedsearches.php' SQL Injection Dork: intext:"Powered by ResourceSpace" Date: 2019-02-01 Exploit Author: dd [email protected] Vendor Homepage: https://www.resourcespace.com/ Software Link:...
ResourceSpace 8.6 SQL Injection
Exploit Title: ResourceSpace =8.6 'watchedsearches.php' SQL Injection Dork: intext:"Powered by ResourceSpace" Date: 2019-02-01 Exploit Author: dd [email protected] Vendor Homepage: https://www.resourcespace.com/ Software Link: https://www.resourcespace.com/get Version: Stable release: 8.6 Mino...
ResourceSpace 8.6 - watched_searches.php SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: ResourceSpace =8.6 'watchedsearches.php' SQL Injection Dork: intext:"Powered by ResourceSpace" Exploit Author: dd email protected Vendor Homepage: https://www.resourcespace.com/ Software Link: https://www.resourcespace.com/get...
ResourceSpace 8.6 - 'watched_searches.php' SQL Injection
Exploit Title: ResourceSpace =8.6 'watchedsearches.php' SQL Injection Dork: intext:"Powered by ResourceSpace" Date: 2019-02-01 Exploit Author: dd [email protected] Vendor Homepage: https://www.resourcespace.com/ Software Link: https://www.resourcespace.com/get Version: Stable release: 8.6 Mino...
ResourceSpace 8.6 - collection_edit.php SQL Injection
ResourceSpace 8.6 - collectionedit.php SQL Injection Exploit Title: ResourceSpace &redirect=yes&ref=3620&submitted=true&name=PWNED&keywords=©=&save=%C2%A0%C2%A0Save%C2%A0%C2%A0'...
ResourceSpace 8.6 SQL Injection
Exploit Title: ResourceSpace &redirect=yes&ref=3620&submitted=true&name=PWNED&keywords=©=&save=%C2%A0%C2%A0Save%C2%A0%C2%A0'...
ResourceSpace 8.6 - collection_edit.php SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: ResourceSpace &redirect=yes&ref=3620&submitted=true&name=PWNED&keywords=©=&save=%C2%A0%C2%A0Save%C2%A0%C2%A0'...