41 matches found
CVE-2024-25123 Path Manipulation in file mslib/index.py in MSS
MSS Mission Support System is an open source package designed for planning atmospheric research flights. In file: index.py, there is a method that is vulnerable to path manipulation attack. By modifying file paths, an attacker can acquire sensitive information from different resources. The filena...
CVE-2024-25123 Path Manipulation in file mslib/index.py in MSS
MSS Mission Support System is an open source package designed for planning atmospheric research flights. In file: index.py, there is a method that is vulnerable to path manipulation attack. By modifying file paths, an attacker can acquire sensitive information from different resources. The filena...
Mattermost Injection Vulnerability
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from an inability to validate the route parameter in //channels/. An attacker exploiting this vulnerability could access files and directorie...
CVE-2023-40894
Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter list at /goform/SetStaticRouteCfg...
CVE-2023-37787
Multiple cross-site scripting XSS vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Rule and Route parameters of /admin/router.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Rule and Route parameters of /admin/router.php...
CVE-2023-37787
Multiple cross-site scripting XSS vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Rule and Route parameters of /admin/router.php...
Server-Side Request Forgery (SSRF)
rsshub is vulnerable to Server-Side Request Forgery SSRF. The vulnerability exists due to unsafe route parameter sanitation, which allows an attacker to send arbitrary HTTP requests from the server to other servers...
WordPress plugin Order Listener for WooCommerce SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. SQL injection vulnerability exists in versions prior to WordPress Order Listener for WooCommerce plugin...
CVE-2020-23718
Cross site scripting XSS vulnerability in xujinliang zibbs 1.0, allows attackers to execute arbitrary code via the route parameter to index.php...
CVE-2020-23718
Cross site scripting XSS vulnerability in xujinliang zibbs 1.0, allows attackers to execute arbitrary code via the route parameter to index.php...
PT-2021-10936
Name of the Vulnerable Software and Affected Versions zibbs version 1.0 Description A cross-site scripting XSS issue allows attackers to execute arbitrary code via the route parameter to "index.php". This could potentially lead to unauthorized actions on the affected system. Recommendations For...
xujinliang zibbs 跨站脚本漏洞
Zibbs Zibbs Forum is a Bootstrap-based Php light forum system. xujinliang zibbs version 1.0 is vulnerable to a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of the route parameter in index.php. An attacker could use this vulnerability to execute...
CVE-2020-23718: Improper Neutralization of Input During Web Page Generation
Cross site scripting XSS vulnerability in xujinliang zibbs 1.0, allows attackers to execute arbitrary code via the route parameter to index.php...
CVE-2021-27129
CASAP Automated Enrollment System version 1.0 contains a cross-site scripting XSS vulnerability through the Students Edit ROUTE parameter...
PT-2021-17253
Name of the Vulnerable Software and Affected Versions: CASAP Automated Enrollment System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited through the ROUTE parameter, which is accessible via the Students Edit path...
CVE-2021-27129: Improper Neutralization of Input During Web Page Generation
CASAP Automated Enrollment System version 1.0 contains a cross-site scripting XSS vulnerability through the Students Edit ROUTE parameter...
CASAP Automated Enrollment 跨站脚本漏洞
CASAP Automated Enrollment is an automated enrollment system organized by CASAP USA. The purpose of the project is to provide an automated enrollment system for CASAP to streamline the process for schools and make it more effective, efficient and easily retrievable. A cross-site scripting...
Open Redirect
getgrav/grav is vulnerable to open redirect. The vulnerability exists because the function redirect in Common/Grav.php does not validate the internal route parameter route and redirect to another location, allowing attackers to provide a malicious route to a location or file...
