CVE-2024-39031: Improper Neutralization of Input During Web Page Generation

In Silverpeas Core = 6.3.5, in Mes Agendas, a user can create new events and add them to their calendar. Additionally, users can invite others from the same domain, including administrators, to these events. A standard user can inject an XSS payload into the "Titre" and "Description" fields when...

CVE-2024-22639

iGalerie v3.0.22 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Titre Title field in the editing interface...

Cross site scripting

iGalerie v3.0.22 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Titre Title field in the editing interface...

iGalerie Security Breach

iGalerie is an online gallery application. A security vulnerability exists in iGalerie version v3.0.22, which stems from a reflected cross-site scripting vulnerability in the Titre field of the edit screen...

CVE-2024-22639: Improper Neutralization of Input During Web Page Generation

iGalerie v3.0.22 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Titre Title field in the editing interface...

CVE-2024-22639

iGalerie v3.0.22 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Titre Title field in the editing interface...

CVE-2024-22639

iGalerie v3.0.22 has a reflected XSS vulnerability via the Titre (Title) field in the editing interface. Root cause: input in the Title field is reflected back, enabling script injection. Impact is limited to confidentiality/integirty (LOW) with user interaction required; CVSS shows MEDIUM overal...

CVE-2019-11620

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php. A remote background administrator privilege user or a user with permission to manage modulecategory could exploit the vulnerability to obtain database sensitive information via...

CVE-2003-1384: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in PY-Livredor 1.0 allows remote attackers to insert arbitrary web script or HTML via the 1 titre, 2 Votre pseudo, 3 Votre e-mail, or 4 Votre message fields...

SYSTONÝCfr/portal/ actualites.asp sql injection

SYSTONЭCfr/portal/ actualites.asp sql injection Credit : CodeXpLoder'tq mail : codexploderathotmaildotcom site : Biyosecurity.net,expw0rm.com thx : BiyoSecurityTeam spec.note : "Live The Life" ///////////////////////////////////////////////////////////////// 1-...

CVE-2006-6934: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Portix-PHP 0.4.2 allow remote attackers to inject arbitrary web script or HTML via the 1 titre or 2 auteur field in a forum post...