CVE-2022-41473

RPCMS v3.0.2 was discovered to contain a reflected cross-site scripting XSS vulnerability in the Search function...

Cross site scripting

RPCMS v3.0.2 was discovered to contain a reflected cross-site scripting XSS vulnerability in the Search function...

CVE-2022-41473: Improper Neutralization of Input During Web Page Generation

RPCMS v3.0.2 was discovered to contain a reflected cross-site scripting XSS vulnerability in the Search function...

CVE-2022-41473

RPCMS v3.0.2 was discovered to contain a reflected cross-site scripting XSS vulnerability in the Search function...

CVE-2022-41473

RPCMS 3.0.2 contains a reflected Cross-Site Scripting (XSS) vulnerability in the Search function. An attacker can inject arbitrary script in the victim’s browser, potentially stealing cookie-based credentials and enabling additional browser-based attacks. Affected product: RPCMS 3.0.2; vulnerabil...

CVE-2022-41473

RPCMS v3.0.2 was discovered to contain a reflected cross-site scripting XSS vulnerability in the Search function...

PT-2022-25880 · Rpcms · Rpcms

Name of the Vulnerable Software and Affected Versions: RPCMS version 3.0.2 Description: A reflected cross-site scripting XSS issue was found in the Search function. This could potentially allow an attacker to inject malicious scripts into the website. Recommendations: For RPCMS version 3.0.2,...

RPCMS 跨站脚本漏洞

RPCMS is a software application. A website CMS system. A security vulnerability exists in RPCMS version v3.0.2 that stems from the inclusion of reflected cross-site scripting XSS in the search function...

Cross site scripting

SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting XSS vulnerability via the Search function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search bar...

CVE-2022-38291

SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting XSS vulnerability via the Search function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search bar...

CVE-2022-38291: Improper Neutralization of Input During Web Page Generation

SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting XSS vulnerability via the Search function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search bar...

CVE-2022-32297

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...

CVE-2022-32297

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...

Sql injection

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...

CVE-2022-32297

CVE-2022-32297 affects Piwigo v12.2.0 and earlier, where the SQL injection vulnerability is triggered via the Search function. The OpenVAS/Red Hat/CVE entries corroborate a web-facing SQLi issue in Piwigo’s search path, with the root cause described as injectable payloads impacting the database. ...

CVE-2022-32297

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...

Piwigo SQL注入漏洞

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A security vulnerability exists in Piwigo v12.2.0 and earlier versions. The vulnerability stems from the fact that an attacker can use...

PT-2022-21214

Name of the Vulnerable Software and Affected Versions Piwigo version 12.2.0 Description The issue is related to a SQL injection vulnerability via the Search function. Recommendations For Piwigo version 12.2.0, at the moment, there is no information about a newer version that contains a fix for th...

CVE-2022-32297: Improper Neutralization of Special Elements used in an SQL Command

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...

PT-2022-13914

Name of the Vulnerable Software and Affected Versions WP Event Manager versions prior to 3.1.28 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the search function in the WP Event Manager plugin does not properly sanitise and escape its output, whic...