2205 matches found
CVE-2021-23936
OX App Suite through 7.10.4 allows XSS via the subject of a task...
Design/Logic Flaw
OX App Suite through 7.10.4 allows XSS via the subject of a task...
CVE-2021-23936
OX App Suite through 7.10.4 allows XSS via the subject of a task...
CVE-2021-23936
OX App Suite (affected up to version 7.10.4) contains a cross-site scripting vulnerability that can be triggered via the subject of a task. The issue is documented under CVE-2021-23936 and is corroborated by multiple sources in the connected documents (CNVD/CVE entries, Red Hat advisory, CVE list...
CVE-2021-23936
OX App Suite through 7.10.4 allows XSS via the subject of a task...
CVE-2021-23936: Improper Neutralization of Input During Web Page Generation
OX App Suite through 7.10.4 allows XSS via the subject of a task...
OpenCart Cross-Site Scripting Vulnerability (CNVD-2020-75515)
OpenCart is a PHP-based open source online e-commerce solution. A cross-site scripting vulnerability exists in the email Subject field in OpenCart 3.0.3.6. An attacker can exploit this vulnerability to steal cookies...
CVE-2020-29470
OpenCart 3.0.3.6 is affected by cross-site scripting XSS in the Subject field of mail. This vulnerability can allow an attacker to inject the XSS payload in the Subject field of the mail and each time any user will open that mail of the website, the XSS triggers and the attacker can able to steal...
CVE-2020-29470
OpenCart 3.0.3.6 is affected by cross-site scripting XSS in the Subject field of mail. This vulnerability can allow an attacker to inject the XSS payload in the Subject field of the mail and each time any user will open that mail of the website, the XSS triggers and the attacker can able to steal...
Cross site scripting
OpenCart 3.0.3.6 is affected by cross-site scripting XSS in the Subject field of mail. This vulnerability can allow an attacker to inject the XSS payload in the Subject field of the mail and each time any user will open that mail of the website, the XSS triggers and the attacker can able to steal...
CVE-2020-29470
OpenCart 3.0.3.6 is affected by cross-site scripting XSS in the Subject field of mail. This vulnerability can allow an attacker to inject the XSS payload in the Subject field of the mail and each time any user will open that mail of the website, the XSS triggers and the attacker can able to steal...
CVE-2020-29470
OpenCart 3.0.3.6 is affected by a cross-site scripting (XSS) vulnerability in the Subject field of mail (CVE-2020-29470). The issue allows injection of an XSS payload in email Subject, which can trigger when a user opens the mail and may enable cookie theft per the disclosed payload. Public advis...
Opencart 跨站脚本漏洞
OpenCart is a PHP-based open source online e-commerce solution. A cross-site scripting vulnerability exists in the email Subject field in OpenCart 3.0.3.6. An attacker can exploit this vulnerability to steal cookies...
CVE-2020-29470: Improper Neutralization of Input During Web Page Generation
OpenCart 3.0.3.6 is affected by cross-site scripting XSS in the Subject field of mail. This vulnerability can allow an attacker to inject the XSS payload in the Subject field of the mail and each time any user will open that mail of the website, the XSS triggers and the attacker can able to steal...
Class Scheduling System 1.0 Cross Site Scripting
Exploit Title: Class Scheduling System 1.0 - Multiple Stored XSS Exploit Author: Aakash Madaan Godsky Date: 2020-12-22 Vendor Homepage: https://www.sourcecodester.com/php/5175/class-scheduling-system.html Software Link:...
Online Learning Management System 1.0 - Multiple Stored XSS
Exploit Title: Online Learning Management System 1.0 - Multiple Stored XSS Exploit Author: Aakash Madaan Godsky Date: 2020-12-22 Vendor Homepage: https://www.sourcecodester.com/php/7339/learning-management-system.html Software Link:...
Class Scheduling System 1.0 - Multiple Stored XSS
Exploit Title: Class Scheduling System 1.0 - Multiple Stored XSS Exploit Author: Aakash Madaan Godsky Date: 2020-12-22 Vendor Homepage: https://www.sourcecodester.com/php/5175/class-scheduling-system.html Software Link:...
CVE-2020-29259: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the subject or feedback parameter to feedback.php...