Lucene search
+L

75 matches found

CNNVD
CNNVD
added 2024/06/23 12:0 a.m.6 views

Service Provider Management System Cross-Site Scripting Vulnerability

Service Provider Management System is a web-based application by Carlo Montero, an individual developer. It is designed to provide dynamic Web sites for service provider companies. A cross-site scripting vulnerability exists in Service Provider Management System version 1.0, which stems from a...

5.1CVSS6AI score0.00452EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2024/06/22 12:0 a.m.12 views

PT-2024-4568 · Sourcecodester · Sourcecodester Service Provider Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Service Provider Management System version 1.0 Description: A vulnerability was found in the System Info Page component of the SourceCodester Service Provider Management System. The issue is due to the lack of protection measur...

5.1CVSS4AI score0.00452EPSS
Exploits1References17
ATTACKERKB
ATTACKERKB
added 2024/05/03 3:16 a.m.5 views

CVE-2023-51633

Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. User interaction is required to exploit this vulnerability. The specific flaw exists within the processing of the...

9.6CVSS6.3AI score0.0109EPSS
Exploits0References2Affected Software1
Huntr
Huntr
added 2023/08/08 10:47 a.m.9 views

Self XSS in "Content Types / Add Content Type"

Description Add payload to field System name: Proof of Concept https://drive.google.com/file/d/1xJ24a3HveP4dpKXF5zmtsNIa2-wweoA/view?usp=sharing...

6.9AI score
Exploits0References1
OSV
OSV
added 2023/04/08 12:15 p.m.8 views

CVE-2023-1961

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/?page=systeminfo. The manipulation of the argument System Name leads to cross site scripting. It is possible to launch the...

6.1CVSS3.7AI score0.00473EPSS
Exploits0References3
CVE
CVE
added 2023/04/08 11:31 a.m.59 views

CVE-2023-1961

CVE-2023-1961 affects SourceCodester Online Computer and Laptop Store 1.0. The vulnerability is a cross-site scripting flaw in the unknown function behind the endpoint /admin/?page=system_info, triggered by manipulating the System Name parameter. It can be exploited remotely, and the exploit has ...

6.1CVSS4.8AI score0.00473EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/08 12:0 a.m.7 views

PT-2023-17374 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A problematic issue has been found, affecting an unknown function of the file "/admin/?page=system info". The manipulation of the System Name argument leads to cross-sit...

6.1CVSS4AI score0.00473EPSS
Exploits0References5
OSV
OSV
added 2022/10/17 12:15 p.m.5 views

CVE-2022-3547

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /csms/admin/?page=systeminfo of the component Setting Handler. The manipulation of the argument System Name/System Short Name lead...

4.8CVSS3.8AI score0.0049EPSS
Exploits1References2
Prion
Prion
added 2022/10/17 12:15 p.m.23 views

Cross site scripting

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /csms/admin/?page=systeminfo of the component Setting Handler. The manipulation of the argument System Name/System Short Name lead...

4.3CVSS4.9AI score0.0049EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/17 12:0 a.m.6 views

PT-2022-22845 · Sourcecodester · Sourcecodester Simple Cold Storage Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Cold Storage Management System version 1.0 Description: A problem was found in the Setting Handler component, specifically affecting the /csms/admin/?page=system info file. The issue arises from the manipulation of the...

4.8CVSS4.6AI score0.0049EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/10/17 12:0 a.m.6 views

Simple Cold Storage Management System 跨站脚本漏洞

Simple Cold Storage Management System is a simple cold storage management system by Carlo Montero, an individual developer. A security vulnerability exists in SourceCodester Simple Cold Storage Management System version 1.0, which originates from an unknown part of the /csms/admin/?page=systeminf...

4.8CVSS4.8AI score0.0049EPSS
Exploits1References3
OSV
OSV
added 2022/06/09 4:15 p.m.3 views

CVE-2022-2020

A vulnerability, which was classified as problematic, has been found in SourceCodester Prison Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/?page=systeminfo of the component System Name Handler. The manipulation with the input leads to cross site...

4.8CVSS4AI score0.0058EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2022/06/07 11:5 a.m.4 views

CVE-2022-2020 SourceCodester Prison Management System System Name cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Prison Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/?page=systeminfo of the component System Name Handler. The manipulation with the input leads to cross site...

2.4CVSS5.1AI score0.0058EPSS
Exploits0References2
OSV
OSV
added 2021/06/30 12:15 p.m.7 views

CVE-2021-35956

Stored cross-site scripting XSS in the embedded webserver of AKCP sensorProbe before SP480-20210624 enables remote authenticated attackers to introduce arbitrary JavaScript via the Sensor Description, Email from/to/cc, System Name, and System Location fields...

5.4CVSS6.1AI score0.0323EPSS
Exploits5References4
Prion
Prion
added 2021/06/30 12:15 p.m.16 views

Cross site scripting

Stored cross-site scripting XSS in the embedded webserver of AKCP sensorProbe before SP480-20210624 enables remote authenticated attackers to introduce arbitrary JavaScript via the Sensor Description, Email from/to/cc, System Name, and System Location fields...

3.5CVSS5AI score0.0323EPSS
Exploits5References4Affected Software5
ATTACKERKB
ATTACKERKB
added 2021/06/30 12:15 p.m.3 views

CVE-2021-35956

Stored cross-site scripting XSS in the embedded webserver of AKCP sensorProbe before SP480-20210624 enables remote authenticated attackers to introduce arbitrary JavaScript via the Sensor Description, Email from/to/cc, System Name, and System Location fields...

5.4CVSS6.2AI score0.0323EPSS
Exploits5References5
CNNVD
CNNVD
added 2021/06/30 12:0 a.m.5 views

AKCP sensorProbe 跨站脚本漏洞

The AKCP sensorProbe is a platform-independent environmental and safety monitoring device from AKCP USA. Simply assign an IP address and connect to the embedded web server. A cross-site scripting vulnerability exists in versions prior to SP480-20210624 of the AKCP sensorProbe Embedded Web Server...

5.4CVSS5.4AI score0.0323EPSS
Exploits5References6
NVD
NVD
added 2020/01/02 8:15 p.m.16 views

CVE-2014-0183

Versions of Katello as shipped with Red Hat Subscription Asset Manager 1.4 are vulnerable to a XSS via HTML in the systems name when registering...

6.1CVSS6AI score0.00662EPSS
Exploits0References2
CVE
CVE
added 2020/01/02 7:20 p.m.87 views

CVE-2014-0183

CVE-2014-0183 affects Katello as shipped with Red Hat Subscription Asset Manager 1.4, vulnerable to cross-site scripting via HTML in the system name during registration. Root cause: HTML in system name not properly sanitized. Impact: potential XSS through the registration flow. Exploitation detai...

6.1CVSS5.9AI score0.00662EPSS
Exploits0References2Affected Software1
0day.today
0day.today
added 2019/08/13 12:0 a.m.28 views

UNA 10.0.0 RC1 - (polyglot.php) Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: UNA - 10.0.0-RC1 stored XSS vuln. Exploit Author: Greg.Priest Vendor Homepage: https://una.io/ Software Link: https://github.com/unaio/una/tree/master/studio Version: UNA - 10.0.0-RC1 Tested on: Windows/Linux CVE : CVE-2019-1480...

3.5CVSS5.7AI score0.02672EPSS
Exploits4
Rows per page
Query Builder