CVE-2022-42486

CVE-2022-42486 is a stored XSS vulnerability in baserCMS, affecting versions prior to 4.7.2. An authenticated administrator can inject arbitrary script via the User group management feature. Impact described in connected sources includes client-side script execution risk; no remote code execution...

CVE-2022-42486

Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

Cross-site Scripting (XSS)

baserproject/basercms is vulnerable to cross-site scripting. The vulnerability exists due to insufficient sanitization of user-supplied data in user group management feature which allows an attacker to inject and execute malicious javaScript on victim's browser...

baserCMS 跨站脚本漏洞

baserCMS is an enterprise-level content management system CMS from the baserCMS team. A security vulnerability exists in baserCMS versions prior to 4.7.2, which stems from stored cross-site scripting in the user group management...

CVE-2018-3134

Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite subcomponent: User Group Management. The supported version that is affected is 6.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the...

Design/Logic Flaw

Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite subcomponent: User Group Management. The supported version that is affected is 6.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the...

CVE-2018-3134

Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite subcomponent: User Group Management. The supported version that is affected is 6.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the...

CVE-2012-5094

Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0 allows remote attackers to affect confidentiality via unknown vectors related to User Group Management...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0 allows remote attackers to affect confidentiality via unknown vectors related to User Group Management...

CVE-2012-5094

Technical details about CVE-2012-5094 are not provided in the connected documents. The records describe an unspecified vulnerability in Oracle Agile PLM for Process with unknown vectors. Monitor for updates from Oracle, SUSE, NVD for specifics.

CVE-2012-5094

Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0 allows remote attackers to affect confidentiality via unknown vectors related to User Group Management...

Linux User Account Activity Add User to Group (via Splunk): audit (USER_CHAUTHTOK)

Binary data 710029.prm...

SQL Injection in phpBB's groupcp.php

BugTraq, I have found an SQL injection vulnerability in phpBB. Hoever, I don't think this is going to be be a wide spread problem as it will only work if you are the moderator of a group. How the SQL injection works: In groupscp, it uses an array set to delete members from certain groups. This...