Stored Cross-Site Scripting Vulnerability in Swordfish Forum Ca***.php File

Swordfish Forum is a bbs forum system officially and publicly released by Catfish CMS, Swordfish Forum program is a completely open source and free forum source code, it is a lightweight and fast php forum source code. Swordfish Forum Ca.php file has a stored cross-site scripting vulnerability...

XSS Vulnerability in Enterprise Online Bookkeeping Management System

Ltd. hereinafter referred to as "Xianqi Technology" was founded in May 2011, is a collection of hardware and software research and development, production, sales and service in one of the high-tech enterprises, but also one of the most influential high-tech enterprises in Shanxi Province. An XSS...

XSS Vulnerability in Construction System of Guangzhou Sanjin Network Technology Co.

Guangzhou Sanjin Network Technology Co., Ltd. is a one-stop provider of Internet application services, providing e-commerce solutions for Chinese enterprises. XSS vulnerability exists in the construction system of Guangzhou Sanjin Network Technology Co. Attackers can utilize the vulnerability to...

XSS Vulnerability in DedeCMS 5.7SP2

DedeCMS is a collection of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS 5.7SP2 exists XSS vulnerability, attackers can exploit the vulnerability to obtain sensitive information such as user cookies...

Stored Cross-Site Scripting Vulnerability in LJCMS (CNVD-2020-18758)

LJCMS is a free and open source content management system. A stored cross-site scripting vulnerability exists in LJCMS. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...

CVE-2019-14550

An issue was discovered in EspoCRM before 5.6.9. Stored XSS was executed when a victim clicks on the Edit Dashboard feature present on the Homepage. An attacker can load malicious JavaScript inside the add tab list feature, which would fire when a user clicks on the Edit Dashboard button, thus...

CVE-2019-14547

An issue was discovered in EspoCRM before 5.6.9. Stored XSS was executed when a attacker sends an attachment to admin with malicious JavaScript in the filename. This JavaScript executed when an admin selects the particular file from the list of all attachments. The attacker could inject the...

CVE-2019-14549

An issue was discovered in EspoCRM before 5.6.9. Stored XSS was executed inside the title and breadcrumb of a newly formed entity available to all the users. A malicious user can inject JavaScript in these values of an entity, thus stealing user cookies when someone visits the publicly accessible...

CVE-2019-13339

In MiniCMS V1.10, stored XSS was found in mc-admin/page-edit.php content box, which can be used to get a user's cookie...

TPCMF has an xss vulnerability

TPCMF is a content management framework developed based on PHPCMF. TPCMF has an xss vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

EXNESS: [com.exness.android.pa Android] Universal XSS in webview. Lead to steal user cookies

Details: Package: com.exness.android.pa Name: Exness Version: 1.7.5-real-release Description: Third-app may use exported activity to load any url in internal webView. This leads to steal cookies used in trading app, including cookies of payment system Vulnerability description: Application has...

WSTMart open source mall system has xss vulnerability

WSTMart open source mall is a system that can help enterprises and individuals to quickly build a community service system. WSTMart open source mall system exists xss vulnerability. Attackers can use this vulnerability to obtain sensitive information such as user cookies...

PHPCMS has an xss vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. An xss vulnerability exists in PHPCMS. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

XSS Vulnerability in Le Wai Hot Drama CMS Website Builder System V2.1

Hot Drama CMS Movie & TV Station Building System is a fully automatic video collection website source code developed by PHP+MySQL. Le Wai Hot Drama CMS website builder system system V2.1 exists XSS vulnerability, attackers can use the vulnerability to obtain sensitive information such as user...

Multiple vulnerabilities in jspxcms

jspxcms is an open source content management system based on java and jsp technology . jspxcms cross-site request forgery and reflective cross-site scripting vulnerabilities. Attackers can use the vulnerability to send scripts containing malicious links , to be reviewed by the administrator can b...

U.S. Dept Of Defense: █████ - DOM-based XSS

Greetings, I've discovered a DOM-based XSS at ███ Proof of concept: 1. Go to https://████/█████████/home/troubleshoot.html?lang=en 2. In the username field, add the following code: --button/autofocus/onfocus=Function"confirm1";//name="XSS 3. The javascript code is correctly executed: ██████ Impac...

Ranzhi Synergy is vulnerable to XSS

Ranch Collaboration System is an open source collaborative office system for small and medium-sized businesses. Ranzhi Synergy has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

Shopify: Subdomain Takeover - https://competition.shopify.com/

Dear Shopify Security Team, The Shopify.com subdomain competition.shopify.com was vulnerable to a subdomain takeover as it was pointing to an unclaimed Heroku service through the CNAME competition.shopify.com.herokudns.com, while the custom domain 'competition.shopify.com' was unclaimed in Heroku...

Stored Cross-Site Scripting Vulnerability at Order Invoice in Cloud EC E-commerce System

Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system order invoice at the existence of stored cross-site scripting vulnerabilities. An...

Catfish CMS suffers from cross-site scripting vulnerability

Catfish Catfish CMS is an open source PHP content management system. A cross-site scripting vulnerability exists in Catfish CMS. An attacker can exploit this vulnerability to obtain cookie information about other users and administrators...