PT-2024-24519 · Wondercms · Wondercms

Name of the Vulnerable Software and Affected Versions: WonderCMS version 3.4.3 Description: A cross-site scripting XSS vulnerability in the Settings section allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the WEBSITE TITLE parameter under the Menu...

CVE-2024-22549

FlyCms 1.0 is vulnerable to Cross Site Scripting XSS in the email settings of the website settings section...

PHPJabbers Event Booking Calendar 4.0 Missing Rate Limiting

Exploit Title: PHPJabbers Event Booking Calendar v4.0 - No Rate Limit on Forgot Password Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/event-booking-calendar/sectionDemo Version:...

CVE-2021-46074

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Settings Section in login panel...

Cross site scripting

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Settings Section in login panel...

PT-2022-12552

Name of the Vulnerable Software and Affected Versions Sourcecodester Vehicle Service Management System version 1.0 Description A Stored Cross Site Scripting XSS issue exists via the Settings Section in the login panel. This allows for malicious scripts to be stored and executed, potentially leadi...

CVE-2021-46074: Improper Neutralization of Input During Web Page Generation

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Settings Section in login panel...

Exploit for Cross-site Scripting in Vehicle_Service_Management_System_Project Vehicle_Service_Management_System

CVE-2021-46074 Exploit Title: Vehicle Service Management...

CVE-2018-0655

Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the app settings section of admin page...

PT-2018-9827

Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue is related to a stored Cross Site Scripting vulnerability. It can be triggered via the Admin Site title in the Settings section. Recommendations: For Frog CMS version 0.9.5, update to a newer...

CVE-2009-1674

Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof pathname in a TOOLSETTINGS section in a .mcp file, possibly a related issue to CVE-2009-1608...