2223 matches found
CVE-2022-27958
Insecure permissions configured in the userid parameter at /user/getuserprofile of FEBS-Security v1.0 allows attackers to access and arbitrarily modify users' personal information...
FEBS-Security 安全漏洞
FEBS-Security is a simple and efficient backend privilege management system. A security vulnerability exists in FEBS-Security v1.0, which stems from insecure permissions configured in the userid parameter of /user/getuserprofile, allowing an attacker to access and arbitrarily modify a user's...
CVE-2022-23973
ASUS RT-AX56U’s user profile configuration function is vulnerable to stack-based buffer overflow due to insufficient validation for parameter length. An unauthenticated LAN attacker can execute arbitrary code to perform arbitrary operations or disrupt service...
CVE-2022-23973
CVE-2022-23973 affects the ASUS RT-AX56U router. The vulnerability is a stack-based buffer overflow in the user profile configuration function caused by insufficient validation of parameter length. An unauthenticated attacker on the local network (LAN) can trigger arbitrary code execution or disr...
CVE-2022-26615
A cross-site scripting XSS vulnerability in College Website Content Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User Profile Name text fields...
CVE-2022-26615
A cross-site scripting XSS vulnerability in College Website Content Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User Profile Name text fields...
CVE-2022-26615
A cross-site scripting XSS vulnerability in College Website Content Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User Profile Name text fields...
Cross site scripting
A cross-site scripting XSS vulnerability in College Website Content Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User Profile Name text fields...
CVE-2022-26615
A cross-site scripting XSS vulnerability in College Website Content Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User Profile Name text fields...
College Website Content Management System 跨站脚本漏洞
College Website Content Management System is a college website management system by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in version 1.0 of the College Website Content Management System, which can be exploited by an attacker to execute arbitrary web...
The vulnerability of the user profile service in the Microsoft Windows operating system allows a hacker to escalate their privileges.
The vulnerability of the user profile service in the Microsoft Windows operating system is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation...
CVE-2022-26644
Online Banking System Protect v1.0 was discovered to contain multiple cross-site scripting XSS vulnerabilities via parameters on user profile, systeminfo and accounts management...
CVE-2022-26644
Online Banking System Protect v1.0 was discovered to contain multiple cross-site scripting XSS vulnerabilities via parameters on user profile, systeminfo and accounts management...
CVE-2022-26644
Online Banking System Protect v1.0 was discovered to contain multiple cross-site scripting XSS vulnerabilities via parameters on user profile, systeminfo and accounts management...
Cross site scripting
Online Banking System Protect v1.0 was discovered to contain multiple cross-site scripting XSS vulnerabilities via parameters on user profile, systeminfo and accounts management...
CVE-2022-26644
Online Banking System Protect v1.0 was discovered to contain multiple cross-site scripting XSS vulnerabilities via parameters on user profile, systeminfo and accounts management...
CVE-2022-26644
The CVE-2022-26644 entry concerns Online Banking System Protect v1.0 with multiple cross-site scripting (XSS) flaws exploitable through parameters on user profile, system_info, and accounts management. This is documented across multiple sources (NVD/Red Hat and PT Security). Root cause is XSS in ...
PT-2022-17976
Name of the Vulnerable Software and Affected Versions Online Banking System Protect version 1.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities are accessible via parameters on the user profile, system info, and accounts management pages...
g33kyrash Online Banking System 跨站脚本漏洞
g33kyrash Online Banking System is an online banking system developed by g33kyrash Personal Developer using PHP and MySQL. A security vulnerability exists in Online Banking System Protect version 1.0, which originates in the user profile, systeminfo, and account management parameters...