8152 matches found
CVE-2023-38992
jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...
CVE-2023-36942
A cross-site scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the website title field...
CVE-2023-36942
A cross-site scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the website title field...
HTML Injection Leads To Open Redirect
Description HTML injection is possible in the Installation title parameter, which leads to Open Redirect when clicked. Proof of Concept Open Redirect 1. Login as Admin 2. Navigate to settings 3. Edit the Installation title and set it to: Click Me 4. Save Changes 5. Click the Click Me text on the...
Online Fire Reporting System 跨站脚本漏洞
Online Fire Reporting System is an online fire reporting system by Carlo Montero, an individual developer. A security vulnerability exists in Online Fire Reporting System version 1.2, which is caused by a cross-site scripting XSS vulnerability in the website title field. An attacker can exploit...
PT-2023-25748 · Unknown · Phpgurukul Online Fire Reporting System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System Using PHP and MySQL version 1.2 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the website title field. This...
CVE-2023-36942: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the website title field...
CVE-2023-37361
REDCap 12.0.26 LTS and 12.3.2 Standard allows SQL Injection via scheduling, repeatforms, purpose, apptitle, or randomization...
CVE-2023-37361
REDCap 12.0.26 LTS and 12.3.2 Standard allows SQL Injection via scheduling, repeatforms, purpose, apptitle, or randomization...
Sql injection
REDCap 12.0.26 LTS and 12.3.2 Standard allows SQL Injection via scheduling, repeatforms, purpose, apptitle, or randomization...
Contao 跨站脚本漏洞
Contao is an open source content management system CMS developed using PHP. The system supports search engines, rights management, and CSS frameworks. Contao suffers from a cross-site scripting vulnerability that originates from the possibility of an untrusted back-end user injecting malicious co...
WP Brutal AI < 2.06 - Admin+ Stored XSS
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. PoC In the plugin settings, for a...
Insecure Direct Object Reference
gitlab is vulnerable to Insecure Direct Object Reference. The vulnerability allows an endpoint to reveal an issue title to the user if they craft an API call with the same issue ID...
Stored XSS in title
Description There is Stored XSS in the item title of the menu on the administrator screen. Proof of Concept Step 1. Log in to the admin screen and select Add New Item in Menu. Step 2. Specify the following Payload for the item title and save it. Step 3. Once saved, any script can be executed on t...
GHSA-JMF7-79P7-QCHQ Duplicate Advisory: Open Babel has out-of-bounds write in CSR PadString (title field)
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-p594-7xw4-g76p. This link is maintained to preserve external references. Original Description An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master comm...
Duplicate Advisory: Open Babel has out-of-bounds write in CSR PadString (title field)
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-p594-7xw4-g76p. This link is maintained to preserve external references. Original Description An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master comm...
PT-2023-4402
Name of the Vulnerable Software and Affected Versions Open Babel versions 3.1.1 through master commit 530dbfa3 Description An out-of-bounds write issue exists in the CSR format title functionality. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a...
PT-2023-36883
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-p594-7xw4-g76p. This link is maintained to preserve external references. Original Description An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master comm...
CVE-2022-41793: Buffer Copy without Checking Size of Input
An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...
