CVE-2023-6472

A vulnerability, which was classified as problematic, has been found in PHPEMS 7.0. This issue affects some unknown processing of the file app\content\cls\api.cls.php of the component Content Section Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. Th...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in PHPEMS 7.0. This issue affects some unknown processing of the file app\content\cls\api.cls.php of the component Content Section Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. Th...

CVE-2023-6472

A vulnerability, which was classified as problematic, has been found in PHPEMS 7.0. This issue affects some unknown processing of the file app\content\cls\api.cls.php of the component Content Section Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. Th...

CVE-2023-6472

PHPEMS 7.0 contains a Cross-Site Scripting (XSS) flaw in the Content Section Handler, specifically in the file app\content\cls\api.cls.php. The issue is executable remotely and the exploit has been disclosed publicly, with multiple sources confirming the affected component and path. Practical imp...

CVE-2023-6472 PHPEMS Content Section api.cls.php cross site scripting

A vulnerability, which was classified as problematic, has been found in PHPEMS 7.0. This issue affects some unknown processing of the file app\content\cls\api.cls.php of the component Content Section Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. Th...

PHPEMS Cross-Site Scripting Vulnerability

PHPEMS is a PHP online practice exam system. A cross-site scripting vulnerability exists in PHPEMS version 7.0, which stems from a cross-site scripting XSS vulnerability in the component Content Section Handler...

PT-2023-32681 · Phpems · Phpems

Name of the Vulnerable Software and Affected Versions: PHPEMS version 7.0 Description: A problematic issue has been found in the Content Section Handler component, specifically affecting the file appcontentclsapi.cls.php. This issue leads to cross-site scripting and can be initiated remotely. The...

CVE-2023-6472: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in PHPEMS 7.0. This issue affects some unknown processing of the file app\content\cls\api.cls.php of the component Content Section Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. Th...

PT-2023-32682

Name of the Vulnerable Software and Affected Versions SourceCodester Online Quiz System version 1.0 Description A problematic issue was found in the file take-quiz.php, where the manipulation of the quiz taker/year section argument leads to cross-site scripting. This can be initiated remotely...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 security update on RHEL 9

New Red Hat Single Sign-On 7.6.6 packages are now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2023-41811

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pandora FMS on all allows Cross-Site Scripting XSS. This vulnerability allowed Javascript code to be executed in the news section of the web console. This issue affects Pandora FMS: from 700 throug...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pandora FMS on all allows Cross-Site Scripting XSS. This vulnerability allowed Javascript code to be executed in the news section of the web console. This issue affects Pandora FMS: from 700 throug...

CVE-2023-41811: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pandora FMS on all allows Cross-Site Scripting XSS. This vulnerability allowed Javascript code to be executed in the news section of the web console. This issue affects Pandora FMS: from 700 throug...

PT-2023-28108 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 700 through 773 Description: The issue is related to improper neutralization of input during web page generation, allowing Cross-Site Scripting XSS. This enables the execution of Javascript code in the news section of the...

PT-2023-9580

Name of the Vulnerable Software and Affected Versions libigl version 2.5.0 Description Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality. A specially crafted .off file can lead to stack-based buffer overflow. An attacker can provide a malicious file to trigge...

PT-2023-9162 · Zabbix +4 · Zabbix +4

Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: The issue is caused by improper validation of the form input field Name on the Graph page in the Items section. This can lead to a cross-site scripting XSS attack, allowing a remote attacker...

US Congress Report Calls for Privacy Reforms After FBI Surveillance 'Abuses'

A new report by an oversight committee in the US House of Representatives says the FBI has routinely violated rules governing FISA’s Section 702 surveillance program and must be reined in...

Important: Red Hat Security Advisory: open-vm-tools security update

An update for open-vm-tools is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

KLA61975 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...