XSS Vulnerability in Shanghai Excellence Electronics Group's G2School Course Center

Shanghai Excellence Electronics Group is a company that takes professionalism and service as its corporate tenet to provide users with comprehensive one-card solutions. An XSS vulnerability exists in Shanghai Excellence Electronics Group's G2School Course Center, which can be exploited by attacke...

Zenphoto cross-site scripting vulnerability (CNVD-2020-32727)

Zenphoto is a content management system CMS. The Zenphoto cross-site scripting vulnerability can be exploited by an attacker to obtain user cookie information...

Genesis has an XSS vulnerability

Genesis is based on Spring + Spring MVC + Mybatis to build the developer community , forum system . Genesis has an XSS vulnerability that can be exploited by an attacker to obtain sensitive information such as user cookies...

ZrLog is vulnerable to XSS

ZrLog is a blog/CMS program developed in Java. ZrLog suffers from an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

WeiPHP suffers from XSS vulnerability (CNVD-2020-37939)

WeiPHP is a convenient and scalable open source WeChat public platform development framework, using it you can easily build a own WeChat public platform. WeiPHP XSS vulnerability , attackers can use the vulnerability to obtain sensitive information such as user cookies...

XSS Vulnerability in Tianniu Website Builder System

Tianniu website builder is an extremely fast online website builder platform. An XSS vulnerability exists in the Tianniu website builder system, which can be exploited by an attacker to obtain user cookie information...

XSS Vulnerability in Extreme CMS Frontend

Extreme CMS is a website building system. An XSS vulnerability exists in the frontend of Extreme CMS, which can be exploited by attackers to obtain user cookie information...

XSS vulnerability in kkcms

kkcms is an open source video capture and playback system. kkcms has an XSS vulnerability that can be exploited by attackers to obtain user cookie information...

Stored Cross-Site Scripting Vulnerability in Swordfish Forum Ca***.php File

Swordfish Forum is a bbs forum system officially and publicly released by Catfish CMS, Swordfish Forum program is a completely open source and free forum source code, it is a lightweight and fast php forum source code. Swordfish Forum Ca.php file has a stored cross-site scripting vulnerability...

XSS Vulnerability in Enterprise Online Bookkeeping Management System

Ltd. hereinafter referred to as "Xianqi Technology" was founded in May 2011, is a collection of hardware and software research and development, production, sales and service in one of the high-tech enterprises, but also one of the most influential high-tech enterprises in Shanxi Province. An XSS...

XSS Vulnerability in Construction System of Guangzhou Sanjin Network Technology Co.

Guangzhou Sanjin Network Technology Co., Ltd. is a one-stop provider of Internet application services, providing e-commerce solutions for Chinese enterprises. XSS vulnerability exists in the construction system of Guangzhou Sanjin Network Technology Co. Attackers can utilize the vulnerability to...

XSS Vulnerability in DedeCMS 5.7SP2

DedeCMS is a collection of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS 5.7SP2 exists XSS vulnerability, attackers can exploit the vulnerability to obtain sensitive information such as user cookies...

Stored Cross-Site Scripting Vulnerability in LJCMS (CNVD-2020-18758)

LJCMS is a free and open source content management system. A stored cross-site scripting vulnerability exists in LJCMS. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...

PT-2019-16287

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 10 Description The issue concerns a SQL injection vulnerability in the Download Provider. This could lead to local information disclosure without requiring additional execution privileges. User interaction is not...

CVE-2019-14550

An issue was discovered in EspoCRM before 5.6.9. Stored XSS was executed when a victim clicks on the Edit Dashboard feature present on the Homepage. An attacker can load malicious JavaScript inside the add tab list feature, which would fire when a user clicks on the Edit Dashboard button, thus...

CVE-2019-14549

An issue was discovered in EspoCRM before 5.6.9. Stored XSS was executed inside the title and breadcrumb of a newly formed entity available to all the users. A malicious user can inject JavaScript in these values of an entity, thus stealing user cookies when someone visits the publicly accessible...

CVE-2019-14547

An issue was discovered in EspoCRM before 5.6.9. Stored XSS was executed when a attacker sends an attachment to admin with malicious JavaScript in the filename. This JavaScript executed when an admin selects the particular file from the list of all attachments. The attacker could inject the...

CVE-2019-13339

In MiniCMS V1.10, stored XSS was found in mc-admin/page-edit.php content box, which can be used to get a user's cookie...

TPCMF has an xss vulnerability

TPCMF is a content management framework developed based on PHPCMF. TPCMF has an xss vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

EXNESS: [com.exness.android.pa Android] Universal XSS in webview. Lead to steal user cookies

Details: Package: com.exness.android.pa Name: Exness Version: 1.7.5-real-release Description: Third-app may use exported activity to load any url in internal webView. This leads to steal cookies used in trading app, including cookies of payment system Vulnerability description: Application has...