PT-2021-10489

Name of the Vulnerable Software and Affected Versions: S-CMS Government Station Building System version 5.0 Description: The issue is related to a cross-site scripting XSS vulnerability in the search function. This means an attacker could potentially inject malicious scripts into the search...

WordPress 插件跨站脚本漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language.Lets-Box Plugin is a WordPress open source application plugin.Wordpress Lets-Box Plugin has a cross-site scripting vulnerability in versions prior to 1.15.3, which stems from the Lets-Box Plugin'...

CVE-2021-41728

Cross Site Scripting XSS vulnerability exists in Sourcecodester News247 CMS 1.0 via the search function in articles...

Cross site scripting

Cross Site Scripting XSS vulnerability exists in Sourcecodester News247 CMS 1.0 via the search function in articles...

CVE-2021-41728

CVE-2021-41728 describes a Cross-Site Scripting (XSS) vulnerability in Sourcecodester News247 CMS 1.0, exploitable via the search function in articles. All connected documents consistently identify the affected product as News247 CMS v1.0 and report user-side script execution risk, but do not pro...

CVE-2021-41728

Cross Site Scripting XSS vulnerability exists in Sourcecodester News247 CMS 1.0 via the search function in articles...

PT-2021-23384

Name of the Vulnerable Software and Affected Versions Sourcecodester News247 CMS version 1.0 Description A Cross Site Scripting XSS issue exists via the search function in articles, allowing potential exploitation. Recommendations For Sourcecodester News247 CMS version 1.0, consider disabling the...

CVE-2021-41728: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in Sourcecodester News247 CMS 1.0 via the search function in articles...

Stack overflow

Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Search function. This vulnerability allows attackers to escalate local process privileges via unspecified vectors...

CVE-2020-28964

CVE-2020-28964 affects Internet Download Manager (IDM) 6.37.11.1, with a stack buffer overflow in the Search function. The root cause is an overflow in the search workflow that could enable local privilege escalation. The documents consistently describe the vulnerability as local and requiring no...

CVE-2020-28964

Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Search function. This vulnerability allows attackers to escalate local process privileges via unspecified vectors...

CVE-2020-28964: Out-of-bounds Write

Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Search function. This vulnerability allows attackers to escalate local process privileges via unspecified vectors...

Internet Download Manager 缓冲区错误漏洞

Tonec Fze Internet Download Manager Idm is a tool to increase download speeds by up to five times, resume and schedule downloads from Tonec Fze, Inc. A buffer error vulnerability exists in Internet Download Manager 6.37.11.1, which originates from a stack buffer overflow found in the search...

WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69268)

WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the keyword search function under the backend article module of WTCMS. No detailed vulnerability details are provided at this time...

CVE-2020-21362

A cross site scripting XSS vulnerability in the background search function of Maccms10 allows attackers to execute arbitrary web scripts or HTML via the 'wd' parameter...

WordPress Post Grid plugin cross-site scripting vulnerability

WordPress is a set of blogging platform developed by Wordpress Foundation using PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Post Grid plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress Po...

CVE-2021-32544

Special characters of IGT search function in igt+ are not filtered in specific fields, which allow remote authenticated attackers can inject malicious JavaScript and carry out DOM-based XSS Cross-site scripting attacks...

Cross site scripting

Special characters of IGT search function in igt+ are not filtered in specific fields, which allow remote authenticated attackers can inject malicious JavaScript and carry out DOM-based XSS Cross-site scripting attacks...

CVE-2021-32544

CVE-2021-32544 relates to Intelligent Global Technology Ltd. igt+ where the search function fails to filter special characters in certain fields, enabling remote authenticated attackers to inject malicious JavaScript and perform DOM-based XSS. The vulnerability is described as DOM-based XSS with ...

PT-2021-19769

Name of the Vulnerable Software and Affected Versions: igt+ affected versions not specified Description: The issue concerns a lack of filtering for special characters in the IGT search function, specifically in certain fields of igt+. This allows remote authenticated attackers to inject malicious...