194 matches found
CVE-2023-37743
A cross-site scripting XSS vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search text box...
CVE-2023-37743
A cross-site scripting XSS vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search text box...
PT-2023-26088 · Unknown · Teacher Subject Allocation System
Name of the Vulnerable Software and Affected Versions: Teacher Subject Allocation System version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search text box. Recommendations: For Teacher Subjec...
CVE-2023-37743
A cross-site scripting XSS vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search text box...
CVE-2023-36936
Cross-Site Scripting XSS vulnerability in PHPGurukul Online Security Guards Hiring System using PHP and MySQL 1.0 allows attackers to execute arbitrary code via a crafted payload to the search booking box...
Online Security Guards Hiring System 跨站脚本漏洞
Online Security Guards Hiring System is an online security guard hiring system. A security vulnerability exists in Online Security Guards Hiring System version 1.0, which can be exploited to execute arbitrary code via a search booking box...
May 23, 2023—KB5026436 (OS Build 22000.2003) Preview
None None...
May 23, 2023—KB5026435 (OS Build 19045.3031) Preview
None None...
Automattic: XSS and HTML Injection on the pressable.com search box
Summary: Hi, I have found that search box on pressable.com is vulnerable for XSS attack and HTML Injection . Steps To Reproduce: 1. Visit https://pressable.com/knowledgebase/ 2. Put the payload on the search box. XSS Payload: " HTML Injection Payload: Visit Our New WebSite e x a m p l e . c o m...
Pybbs Cross-Site Scripting Vulnerability
Pybbs is a community forum for more practical Java development. A cross-site scripting vulnerability exists in Pybbs, which stems from the product's search box not effectively handling special characters in user input data. An attacker can exploit this vulnerability to execute client-side code...
CVE-2022-23391
A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...
CVE-2022-23391
A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...
Cross site scripting
A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...
CVE-2022-23391
A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...
CVE-2022-23391
A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...
CVE-2022-23391
A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...
PT-2022-15972
Name of the Vulnerable Software and Affected Versions Pybbs version 6.0 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box. Recommendations For Pybbs version 6.0, consider restricting access to...
CVE-2022-23391: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...
Cross site scripting
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...
CVE-2020-20345
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...