showdoc .shtml file upload vulnerability

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 are vulnerable to file uploads, which stem from the lack of effective detection of .shtml file extensions in the application's file upload feature. An attacker could use this vulnerability to...

showdoc .xsl file upload vulnerability

showdoc is an open source tool ideal for IT teams to share documents online. showdoc versions prior to v2.10.4 contain a file upload vulnerability that stems from the lack of effective detection of .xsl file extensions in the application's file upload feature. An attacker could exploit this...

showdoc .xxhtml file upload vulnerability

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 contain a file upload vulnerability that stems from the lack of effective detection of .xxhtml file extensions in the application's file upload feature. An attacker could exploit this...

showdoc .aspx file upload vulnerability

showdoc is an open source tool ideal for IT teams to share documents online. showdoc versions prior to v2.10.4 contain a file upload vulnerability, which stems from the lack of valid detection of .aspx file extensions in the application's file upload feature. An attacker could exploit this...

OS4Ed OpenSIS Cross-Site Scripting Vulnerability

OS4Ed OpenSIS is OS4Ed's commercial-grade, secure, scalable and intuitive student information system, school management software. With all the functionality to run single or multiple institutions in a single installation, OS4Ed OpenSIS suffers from a cross-site scripting vulnerability that could ...

XSS Vulnerability in BossCMS of Wenzhou Huyin Information Technology Co. Ltd (CNVD-2022-21727)

BossCMS is a content management system based on self-developed PHP framework MySQL architecture developed by Wenzhou Huyin Information Technology Co. There is an XSS vulnerability in BossCMS, which can be exploited by attackers to obtain sensitive information such as user cookies...

Cross-site Scripting (XSS)

remdex/livehelperchat is vulnerable to stored cross-site scripting. The vulnerability exists due to improper sanitization of the name field in embedcode.tpl.php which allows an attacker to steal user cookies and execute arbitrary scripts...

WordPress Plugin Slider By Soliloquy Cross-Site Scripting Vulnerability

WordPress is a suite of blogging platforms from the Wordpress Foundation developed using the PHP language.WordPress Slider By Soliloquy is a drag-and-drop slider plugin that creates beautiful responsive image and video sliders for users' WordPress websites. A cross-site scripting vulnerability...

Cross-site Scripting (XSS) - Reflected in kunstmaan/kunstmaanbundlescms

Description In kunstmaan / kunstmaanbundlescms ,extra metadata in seo form is vulnerable to reflected cross site scripting. Proof of Concept 1. login to the demo account 2. go to pages --select any page to edit -- go to SEO --- 3. Add payload to extra meta data and click save and see the preview ...

XSS Vulnerability in Learning Express Cloud Drive

Founded in 1993, Beijing Century Super Star Information Technology Development Limited Liability Company is one of the early companies in China engaged in the digitization of paper materials and the production of electronic publications. An XSS vulnerability exists in Study Pass Cloud Drive, whic...

CVE-2021-41747

Cross-Site Scripting XSS vulnerability exists in Csdn APP 4.10.0, which can be exploited by attackers to obtain sensitive information such as user cookies...

Cross site scripting

Cross-Site Scripting XSS vulnerability exists in Csdn APP 4.10.0, which can be exploited by attackers to obtain sensitive information such as user cookies...

CVE-2021-41747

CVE-2021-41747 is a Cross-Site Scripting (XSS) vulnerability in Csdn APP 4.10.0. The issue arises from lack of proper validation of client data by the WEB application, enabling an attacker to execute script and potentially access sensitive information such as user cookies. Affected product/compon...

CVE-2021-41747

Cross-Site Scripting XSS vulnerability exists in Csdn APP 4.10.0, which can be exploited by attackers to obtain sensitive information such as user cookies...

Cross site scripting

Cross Site Scripting XSS vulnerability exists in KindEditor Chinese versions 4.1.12, which can be exploited by an attacker to obtain user cookie information...

CVE-2020-21082

A cross-site scripting XSS vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names...

Cross site scripting

A cross-site scripting XSS vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names...

WordPress plugin Current Book 'Book Title and Author field' cross-site scripting vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up websites on servers that support PHP and MySQL databases, and can also be used as a content management system CMS. cross-site scripting vulnerability exists in the WordPress plugin Current Book 'Book Title and...

Stored XSS Vulnerability in the Smart Gateway Configuration Platform of Beijing Bibi Technology Co.

Ltd. is a company with professional Wi-Fi technology, which is committed to combining Internet technology with traditional industries to help industry customers embrace the Internet and create new value for traditional industries. There is a stored XSS vulnerability in the Smart Gateway...

Stored XSS Vulnerability in 189 Mailbox of China Telecom Group Corporation Ltd.

189 Mailbox is a new type of work and business mailbox for all Internet users. A stored XSS vulnerability exists in China Telecom Group Corporation's 189 mailbox, which can be exploited by attackers to obtain sensitive information such as user cookies...