68 matches found
CVE-2024-40490
An issue in Sourcebans++ before v.1.8.0 allows a remote attacker to obtain sensitive information via a crafted XAJAX call to the Forgot Password function...
CVE-2024-40490
An issue in Sourcebans++ before v.1.8.0 allows a remote attacker to obtain sensitive information via a crafted XAJAX call to the Forgot Password function...
CVE-2024-40490
An issue in Sourcebans++ before v.1.8.0 allows a remote attacker to obtain sensitive information via a crafted XAJAX call to the Forgot Password function...
CVE-2024-40490
An issue in Sourcebans++ before v.1.8.0 allows a remote attacker to obtain sensitive information via a crafted XAJAX call to the Forgot Password function...
CVE-2024-40490
An issue in Sourcebans++ before v.1.8.0 allows a remote attacker to obtain sensitive information via a crafted XAJAX call to the Forgot Password function...
PT-2024-28874 · Unknown · Sourcebans++
Name of the Vulnerable Software and Affected Versions: Sourcebans++ versions prior to 1.8.0 Description: The issue allows a remote attacker to obtain sensitive information via a crafted XAJAX call to the Forgot Password function. This occurs in Sourcebans++ when the attacker uses a crafted XAJAX...
CVE-2024-40490: Observable Discrepancy
An issue in Sourcebans++ before v.1.8.0 allows a remote attacker to obtain sensitive information via a crafted XAJAX call to the Forgot Password function...
CVE-2024-40490
An issue in Sourcebans++ before v.1.8.0 allows a remote attacker to obtain sensitive information via a crafted XAJAX call to the Forgot Password function...
CVE-2024-40490
A security vulnerability exists in Sourcebans++ versions prior to v.1.8.0 , a management system for the Source engine. A remote attacker can exploit this issue by sending a crafted XAJAX call to the Forgot Password function to obtain sensitive information . To resolve this, users should update to...
Cross site scripting
Cross-site scripting XSS vulnerability in SourceBans before 2.0 pre-alpha allows remote attackers to inject arbitrary web script or HTML via the advSearch parameter to index.php...
CVE-2015-8349
Cross-site scripting XSS vulnerability in SourceBans before 2.0 pre-alpha allows remote attackers to inject arbitrary web script or HTML via the advSearch parameter to index.php...
CVE-2015-8349
Cross-site scripting XSS vulnerability in SourceBans before 2.0 pre-alpha allows remote attackers to inject arbitrary web script or HTML via the advSearch parameter to index.php...
CVE-2015-8349
SourceBans before 2.0 pre-alpha is affected by CVE-2015-8349, a Cross-Site Scripting (XSS) vulnerability in the advSearch parameter of index.php. The root cause is insufficient filtration/validation of input data, allowing remote attackers to inject arbitrary web script or HTML. Exploitation cont...
CVE-2015-8349: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in SourceBans before 2.0 pre-alpha allows remote attackers to inject arbitrary web script or HTML via the advSearch parameter to index.php...
PT-2017-7398
Name of the Vulnerable Software and Affected Versions SourceBans versions prior to 2.0 pre-alpha Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the advSearch parameter to "index.php". Recommendations For versions prior to 2.0...
sourcebans-pp cross-site scripting vulnerability
sourcebans-pp a.k.a. SourceBans++ is an advanced management system for the Source engine a 3D game engine by the Sourcebans team. The system allows system administrators to set administrative privileges for all users on the server and to terminate games on the server over the network. A cross-sit...
Design/Logic Flaw
sourcebans-pp SourceBans++ 1.5.4.7 has XSS in admin.comms.php via the rebanid parameter...
CVE-2017-7891
sourcebans-pp SourceBans++ 1.5.4.7 has XSS in admin.comms.php via the rebanid parameter...