Heybbs has an XSS vulnerability

Heybbs is a front-end based on bootstrap + js + css, back-end php + mysql development of community programs. Heybbs has an XSS vulnerability. Attackers can use the vulnerability to obtain sensitive information such as user cookies...

Stored XSS Vulnerability in Diyun CMS

DiYunCMS DiYun CMS is a free open source PHP enterprise website management system . A stored XSS vulnerability exists in DiYun CMS. Attackers can use the vulnerability to obtain sensitive information such as user cookies...

XSS Vulnerability in Situ CMS

Situ CMS is the short name of Situ Tourism Website Management System, which is a self-developed website management system applicable to the construction of tourism websites. An XSS vulnerability exists in Situ CMS. An attacker can exploit this vulnerability to obtain sensitive information such as...

XSS Vulnerability in Kaixin Worklog System worklog

Kaixin Worklog Worklog system is a software system based on B/S to build the collaborative office within the enterprise. The system uses ASP.NET language development. Kai star worklog system worklog there are XSS vulnerabilities , attackers can use the vulnerability to obtain sensitive informatio...

XSS Vulnerability in PigX Rapid Development Framework

PigX Rapid Development Framework is based on Spring Security OAuth2 to achieve account password , SMS verification code login , social login , etc., to provide an open platform based on OAuth2 authorization code mode . PigX Rapid Development Framework has an XSS vulnerability. Attackers can use t...

Cross-site scripting vulnerability in simcms (CNVD-2020-70840)

simcms is a solution for used car website based on PHP+MYSQL. A cross-site scripting vulnerability exists in simcms. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

XSS Vulnerability in OFCMS

OFCMS is a java version of the CMS system, based on java technology development of content management system. OFCMS has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

XSS Vulnerability in the Collaborative Journal Acquisition and Editing System of China Academic Journals (CD-ROM Version) Electronic Magazine Agency Ltd.

The collaborative editorial system of periodicals is a comprehensive service platform for the whole process of periodicals collection, editing, reviewing, proofreading and distribution. An XSS vulnerability exists in the collaborative journal collection and editing system of China Academic Journa...

Stored Cross-Site Scripting Vulnerability in Ant Notes

Ant Notes is a cloud notes software, cross-platform, support markdown format, support for web, PC, mobile APP client, and WeChat version, support for generating public blogs and PDF. Ant Notes has a stored cross-site scripting vulnerability. Attackers can use the vulnerability to obtain sensitive...

Victor CMS has a stored XSS vulnerability

Victor CMS is a simple content management system. Victor CMS suffers from a stored XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

Stored Cross-Site Scripting Vulnerability in PHPDisk Web Disk System

PHPDISK network disk system abbreviation: PHPDISK is a set of PHP and MySQL to build a network hard disk file storage management system , can replace the traditional FTP file management . A storage-based cross-site scripting vulnerability exists in the PHPDisk network disk system. An attacker can...

CVE-2020-6876

A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB module. By inserting malicious scripts into the web module, a remote attacker could trigger an XSS attack when the user browses the web page. Then the...

Cross site scripting

A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB module. By inserting malicious scripts into the web module, a remote attacker could trigger an XSS attack when the user browses the web page. Then the...

Stored Cross-Site Scripting Vulnerability in XYHCMS

XYHCMS is a completely open source CMS content management system, simple, easy to use, secure, stable and free. XYHCMS has a stored cross-site scripting vulnerability. Attackers can use the vulnerability to obtain sensitive information such as user cookies...

Stored Cross-Site Scripting Vulnerability in Nethub CMS PHP Version

OTCMS Nettie CMS is an article-based web content management system CMS. A stored cross-site scripting vulnerability exists in the PHP version of OTCMS. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

Stored Cross-site Scripting Vulnerability in Dahan Software Portal Building System

Dahan Software is a professional developer of Internet software applications. A stored cross-site scripting vulnerability exists in the Dahan Software portal building system. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

Swordfish forum cms has XSS vulnerability

Swordfish Forum System is a light forum system, officially developed and released by Catfish CMS. Swordfish forum cms has an XSS vulnerability that can be exploited by attackers to obtain user cookie information...

PT-2020-14937 · Cellopoint · Cellopoint Cellos

Name of the Vulnerable Software and Affected Versions: Cellopoint Cellos version 4.1.10 Build 20190922 Description: The issue concerns improper validation of URL input. An attacker can manipulate the URL parameter using the cookie of an authenticated user to access arbitrary files on the system...

XSS Vulnerability in Hubei Nuoqianjin Network Technology Co.

Hubei Nuoqianjin Network Technology Co., Ltd. specializes in marketing website construction, SEO integration and promotion. Hubei Nuoyuanjin Network Technology Co., Ltd. station building system there are XSS vulnerabilities, attackers can use the vulnerability to obtain sensitive information such...

XSS Vulnerability in Xingwangtong Online Chat Tool of Zhejiang Xingwang Baomingtong Network Co.

Zhejiang Xingwang Baomingtong Network Co., Ltd. is a national high-tech enterprise specializing in the development and operation of vertical website and the whole network marketing service for enterprises. Zhejiang Xingwang Baomingtong Network Co., Ltd. Xingwangtong online chat tool XSS...