CVE-2021-21324

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 there is an Insecure Direct Object Reference IDOR on "Solutions". This vulnerability gives an unauthorized user the abili...

GLPI 安全漏洞

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

pki-core 跨站脚本漏洞

pki-core is a library that provides an API for PKI operations. A cross-site scripting vulnerability exists in pki-core, which stems from the fact that a specially designed POST request can be used to reflect a dom-based cross-site scripting attack by injecting code into a search query form that c...

PT-2021-11171 · Pki-Core +6 · Pki-Core +6

Name of the Vulnerable Software and Affected Versions: pki-core version 10.9.0 Description: A flaw was found in the software, allowing a specially crafted POST request to reflect a DOM-based cross-site scripting XSS attack. This can inject code into the search query form, which can get...

iSmartgate PRO Cross-Site Request Forgery Vulnerability (CNVD-2021-01047)

The iSmartgate PRO is a smart garage door opening system. A cross-site request forgery vulnerability exists in iSmartgate PRO 1.5.9. An attacker can exploit this vulnerability to conduct a cross-site request forgery attack via the busca parameter in a form used to search for users...

MTN Group: Cross-Site Scripting through search form on mtnplay.co.zm

Summary: There is a XSS vulnerability that can be triggered through a search form on mtnplay.co.zm Steps To Reproduce: 1. Navigate to http://www.mtnplay.co.zm/smart/jqm.aspx 2. Click on the search button or go to this link: http://www.mtnplay.co.zm/smart/jqm.aspx?event=search&mnu=search&ctrlid=92...

CVE-2013-7479

The events-manager plugin before 5.3.9 for WordPress has XSS in the search form field...

Design/Logic Flaw

The events-manager plugin before 5.3.9 for WordPress has XSS in the search form field...

CVE-2013-7479

The events-manager plugin before 5.3.9 for WordPress has XSS in the search form field...

CVE-2019-12932

SeedDMS 5.1.11 is affected by a stored XSS weakness originating from insufficient escaping of the autocomplete search results in the header’s out/out.Viewfolder.php. The vulnerability allows injection of malicious scripts via the search autocomplete field, with the issue surface described consist...

CVE-2019-7435

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form...

CVE-2019-7435

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form...

CVE-2019-5722

An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Due to a lack of user input validation in parameter handling, it has various SQL injections, including on the login form, and on the search form for a key ring number...

Sql injection

An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Due to a lack of user input validation in parameter handling, it has various SQL injections, including on the login form, and on the search form for a key ring number...

Design/Logic Flaw

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form...

PHP Scripts Mall Classified Ads Script Reflective HTML Injection Vulnerability

PHP Scripts Mall Classified Ads Script is a classified ads script. PHP Scripts Mall Classified Ads Script 3.2.2 suffers from a reflected HTML injection vulnerability. An attacker can exploit this vulnerability to perform HTML injection via a search form...

CVE-2019-5722

An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Due to a lack of user input validation in parameter handling, it has various SQL injections, including on the login form, and on the search form for a key ring number...

Jirafeau cross-site scripting vulnerability (CNVD-2018-13451)

Jirafeau is a file sharing website system. A cross-site scripting vulnerability exists in the search file by name form in Jirafeau versions prior to 3.4.1. A remote attacker can exploit this vulnerability to inject JavaScript and manipulate the user session...

Cross site scripting

An issue was discovered in Jirafeau before 3.4.1. The file "search by name" form is affected by one Cross-Site Scripting vulnerability via the name parameter...

Cross site scripting

An issue was discovered in Jirafeau before 3.4.1. The "search file by hash" form is affected by reflected XSS that could allow, by targeting an administrator, stealing a session and gaining administrative privileges...