2943 matches found
CVE-2021-28001
A cross-site scripting vulnerability was discovered in the Comments parameter in Textpattern CMS 4.8.4 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting...
CVE-2021-34655
The WP Songbook WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the url parameter found in the /inc/class.ajax.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.11...
CVE-2021-34655 WP Songbook <= 2.0.11 Reflected Cross-Site Scripting
The WP Songbook WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the url parameter found in the /inc/class.ajax.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.11...
getsimplecms 跨站脚本漏洞
getsimplecms is a content management system for individual developers. A cross-site scripting vulnerability exists in getsimplecms, which stems from an XSS vulnerability in the siteURL parameter of the /admin/settings.php page...
CVE-2021-3314
Oracle GlassFish Server 3.1.2.18 and below allows /common/logViewer/logViewer.jsf XSS. A malicious user can cause an administrator user to supply dangerous content to the vulnerable page, which is then reflected back to the user and executed by the web browser. The most common mechanism for...
CVE-2021-3314
Oracle GlassFish Server 3.1.2.18 and below allows /common/logViewer/logViewer.jsf XSS. A malicious user can cause an administrator user to supply dangerous content to the vulnerable page, which is then reflected back to the user and executed by the web browser. The most common mechanism for...
GNUBOARD5 Cross-Site Scripting Vulnerability (CNVD-2021-45752)
GNUBOARD5 is a Web forum system based on PHP and MySQL. A cross-site scripting vulnerability exists in GNUBOARD5 5.3.2.8 and earlier versions. The vulnerability can be exploited to conduct cross-site scripting attacks via the url parameter in bbs/login.php...
GetSimple CMS Open Redirect Vulnerability (CNVD-2021-46556)
GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. An open redirect vulnerability exists in admin/changedata.php in GetSimple CMS 3.3.15 and earlier versions. An attacker can redirect a user to a url parameter via the redirect function...
Oracle GlassFish Server 跨站脚本漏洞
Oracle GlassFish Server is an application from Oracle Corporation.Oracle GlassFish Server is built using the GlassFish Server Open Source Edition to provide a flexible, lightweight, and production-ready Java EE 6 application server. Oracle GlassFish Server suffers from a cross-site scripting...
Cross site scripting
Cross Site Scripting XSS vulnerability in gnuboard5 =v5.3.2.8 via the url parameter to bbs/login.php...
CVE-2020-18661
Cross Site Scripting XSS vulnerability in gnuboard5 =v5.3.2.8 via the url parameter to bbs/login.php...
CVE-2020-18660
GetSimpleCMS =3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter...
CVE-2020-18660
GetSimpleCMS =3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter...
Open redirect
GetSimpleCMS =3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter...
CVE-2020-18660
GetSimpleCMS =3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter...
KuaiFanCMS Arbitrary File Read Vulnerability
KuaiFanCMS later referred to as KF using PHP5 + MYSQL as the technical basis for the development of KF using the Smarty template engine to build a site system. KuaiFanCMS V5 has a security vulnerability, the vulnerability stems from KuaiFanCMS V5 in chakanhtml.module.php file HTML url parameter...
Liferay DXP 跨站脚本漏洞
Liferay DXP is a suite of digital experience collaboration platforms from US-based Liferay. A security vulnerability exists in Liferay DXP 7.0, which allows remote attackers to inject arbitrary web script or HTML via the currentURL parameter...
WP Hardening < 1.2.2 - Reflected XSS via historyvalue
The plugin did not sanitise or escape the historyvalue GET parameter before outputting it in a Javascript block, leading to a reflected Cross-Site Scripting issue. https://example.com/wp-admin/admin.php?page=wphwpharden&historyvalue=alertdocument.domain//...
MTN Group: Reflected XSS at dailydeals.mtn.co.za
Hello MTN Group: I found reflected XSS vi categoryid= parameter . The server reads data directly from the HTTP request and reflects it back in the HTTP response. Reflected XSS exploits occur when an attacker causes a victim to supply dangerous content to a vulnerable web application, which is the...