66 matches found
CVE-2023-46948
CVE-2023-46948 - Temenos T24 R19.40 中的反射型 XSS 在 Temenos T24 Browser R19.40 中发现了一个反射型跨站脚本（XSS）漏洞，该漏洞使远程攻击者能够在已认证受害者的基于浏览器的 Web 控制台中执行任意 JavaScript 代码。 受影响产品：Temenos T24 - R19.40 受影响组件： /BrowserWebR19/jsps/about.jsp /BrowserWebR19/jsps/genrequest.jsp 受影响参数：'skin' 请求： 响应： 修复措施： 时间线： 发现 | 2023年10月4日...
CVE-2026-86444
The LearnPress WordPress plugin versions prior to 4.4.7 is vulnerable to Reflected XSS due to improper neutralization of input. The root cause is the failure to escape user-supplied values before they are used in an HTML attribute on a public page. This allows unauthenticated attackers to execute...
CVE-2026-86444 LearnPress < 4.4.7 - Reflected XSS via 'skin' Parameter
The LearnPress WordPress plugin before 4.4.7 does not escape a user supplied value before using it in an HTML attribute on a public page, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who opens a crafted link, including a logged in administrator. Only...
CVE-2026-86444 LearnPress < 4.4.7 - Reflected XSS via 'skin' Parameter
The LearnPress WordPress plugin before 4.4.7 does not escape a user supplied value before using it in an HTML attribute on a public page, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who opens a crafted link, including a logged in administrator. Only...
CVE-2005-1083
index.php in aeDating 3.2 allows remote attackers to include arbitrary files via the skin parameter...
EUVD-2005-1086
Malware in sbrugna...
EUVD-2006-6261
Malware in sbrugna...
EUVD-2008-4412
Malware in sbrugna...
EUVD-2006-6262
Malware in sbrugna...
EUVD-2021-32066
Malicious code in bioql PyPI...
CVE-2023-46948
A reflected Cross-Site Scripting XSS vulnerability was found on Temenos T24 Browser R19.40 that enables a remote attacker to execute arbitrary JavaScript code via the skin parameter in the about.jsp and genrequest.jsp components...
CVE-2023-46948: Improper Neutralization of Input During Web Page Generation
A reflected Cross-Site Scripting XSS vulnerability was found on Temenos T24 Browser R19.40 that enables a remote attacker to execute arbitrary JavaScript code via the skin parameter in the about.jsp and genrequest.jsp components...
CVE-2023-46948
A reflected Cross-Site Scripting XSS vulnerability was found on Temenos T24 Browser R19.40 that enables a remote attacker to execute arbitrary JavaScript code via the skin parameter in the about.jsp and genrequest.jsp components...
CVE-2024-7926
A vulnerability classified as critical has been found in ZZCMS 2023. Affected is an unknown function of the file /admin/aboutedit.php?action=modify. The manipulation of the argument skin leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the...
CVE-2024-7924
A vulnerability was found in ZZCMS 2023. It has been declared as critical. This vulnerability affects unknown code of the file /I/list.php. The manipulation of the argument skin leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...
ZZCMS 路径遍历漏洞
ZZCMS is a content management system CMS by the ZZCMS team in China. A path traversal vulnerability exists in ZZCMS version 2023, which stems from the parameter skin in the file /admin/aboutedit.php?action=modify that causes path traversal. No details of the vulnerability are provided at this tim...
ZZCMS 路径遍历漏洞
ZZCMS is a content management system CMS by the ZZCMS team in China. A path traversal vulnerability exists in ZZCMS version 2023, which stems from the parameter skin in the file /admin/class.php?dowhat=modifyclass that causes path traversal. No details of the vulnerability are provided at this ti...
PT-2024-38692 · Zzcms · Zzcms
Name of the Vulnerable Software and Affected Versions: ZZCMS version 2023 Description: A critical vulnerability has been found in ZZCMS. The issue affects an unknown function of the file /admin/about edit.php?action=modify. The manipulation of the skin argument leads to path traversal. It is...
VulnCheck KEV: CVE-2013-7091
Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows remote attackers to read arbitrary files via a .. dot dot in the skin parameter. NOTE: this can be leveraged to execute arbitrary code by obtaining LD...
