54 matches found
CVE-2025-41026 Multiple vulnerabilities in GDTaller
Reflected Cross Site Scripting XSS vulnerabilities in GDTaller. These vulnerabilities allows an attacker execute JavaScript code in the victim's browser by sending a malicious URL in 'site' parameter in 'applogin.php'...
CVE-2025-41026
CVE-2025-41026: Reflected XSS in GDTaller. Vulnerability arises from handling the site parameter in app_login.php, allowing an attacker to cause JavaScript execution in the victim’s browser via a malicious URL. Documents indicate this is a reflected XSS with CVSS v4.0 base score 5.1 (Medium); no ...
GDTaller 跨站脚本漏洞
GDTaller is a digital certificate and electronic seal management system developed by the Spanish company GDTaller. GDTaller has a cross-site scripting vulnerability, which stems from the site parameter in the applogin.php file. Attackers can send victims a URL containing malicious scripts, causin...
PT-2026-28282
Name of the Vulnerable Software and Affected Versions GDTaller affected versions not specified Description The software contains Reflected Cross Site Scripting XSS issues. These allow an attacker to execute JavaScript code in a victim’s browser by sending a malicious URL containing crafted code i...
GDTaller 跨站脚本漏洞
GDTaller is a digital certificate and electronic seal management system developed by the Spanish company GDTaller. GDTaller has a cross-site scripting vulnerability, which originates from the site parameter in the apprecuperarclave.php file. This vulnerability could allow attackers to execute...
PT-2026-28283
Name of the Vulnerable Software and Affected Versions GDTaller affected versions not specified Description Reflected Cross Site Scripting XSS issues exist in GDTaller. These issues allow an attacker to execute JavaScript code in a victim's browser by sending a malicious URL containing crafted...
EUVD-2007-4012
Malware in sbrugna...
EUVD-2006-1203
Malware in sbrugna...
Cross Site Scripting (XSS)
ConcreteCMS is vulnerable to Cross Site Scripting. The vulnerability is due to insufficient input validation in the SITE parameter. This allows an attacker to execute malicious JavaScript on the client side...
ConcreteCMS Cross-site Scripting vulnerability
A Cross Site Scripting XSS vulnerability in Concrete CMS v.9.2.1 allows an attacker to execute arbitrary code via a crafted script to the SITE parameter from installation or in the Settings...
PT-2023-29288 · Unknown · Concrete Cms
Name of the Vulnerable Software and Affected Versions: Concrete CMS versions prior to 9.2.3 Description: A Cross Site Scripting XSS issue exists via the SITE parameter during installation or in the Settings, allowing an attacker to execute arbitrary code via a crafted script. Recommendations: For...
Google for OpSec data discovery
Following last months post about what OpSec is and how it can benefit your company I wanted go a step further, and look at some of the ways you can super charge your searches to find interesting data about your company. Basic search parameters As I mentioned last month, one of the most useful too...
Lark Technologies: In orginization stored xss using location (Larksuite survey app)
A stored XSS cross-site scripting vulnerability was found in Larksuite survey app using the "site" parameter. We thank imrannisar for reporting this vulnerability and confirming its resolution...
CVE-2019-11565
Server Side Request Forgery SSRF exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter...
CVE-2019-11565
Server Side Request Forgery SSRF exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter...
DEBIAN-CVE-2013-4556
Cross-site scripting XSS vulnerability in the author page prive/formulaires/editerauteur.php in SPIP before 2.1.24 and 3.0.x before 3.0.12 allows remote attackers to inject arbitrary web script or HTML via the urlsite parameter...
UBUNTU-CVE-2013-4556
Cross-site scripting XSS vulnerability in the author page prive/formulaires/editerauteur.php in SPIP before 2.1.24 and 3.0.x before 3.0.12 allows remote attackers to inject arbitrary web script or HTML via the urlsite parameter...
CVE-2011-5160
Cross-site scripting XSS vulnerability in setup.php in OpenEMR 4 allows remote attackers to inject arbitrary web script or HTML via the site parameter...
WikLink 0.1.3 SQL Injection
www.eVuln.com advisory: "fold" and "site" SQL Injections in WikLink Summary: http://evuln.com/vulns/172/summary.html Details: http://evuln.com/vulns/172/description.html -----------Summary----------- eVuln ID: EV0172 Software: WikLink Vendor: n/a Version: 0.1.3 Critical Level: medium Type: SQL...
