Page Views Count < 2.4.15 - Unauthenticated SQL Injection

The plugin does not sanitise and escape the postids parameter before using it in a SQL statement via a REST endpoint, available to both unauthenticated and authenticated users. As a result, unauthenticated attackers could perform SQL injection attacks PoC...

Page Views Count < 2.4.15 - Unauthenticated SQL Injection

The plugin does not sanitise and escape the postids parameter before using it in a SQL statement via a REST endpoint, available to both unauthenticated and authenticated users. As a result, unauthenticated attackers could perform SQL injection attacks...

DEBIAN-CVE-2021-46659

MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW...

CVE-2021-46659

MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW...

VulnCheck KEV: CVE-2013-0322

Cross-site scripting XSS vulnerability in Views in the Ubercart module 7.x-3.x before 7.x-3.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field...

GHSA-C6RP-XVQV-MWMF Cross-site Scripting in epubjs

managers/views/iframe.js in FuturePress EPub.js before 0.3.89 allows XSS...

CVE-2021-33040

managers/views/iframe.js in FuturePress EPub.js before 0.3.89 allows XSS...

CVE-2021-33040

managers/views/iframe.js in FuturePress EPub.js before 0.3.89 allows XSS...

Cross site scripting

managers/views/iframe.js in FuturePress EPub.js before 0.3.89 allows XSS...

CVE-2021-33040

CVE-2021-33040 affects FuturePress EPub.js (prior to v0.3.89). The vulnerability is a XSS in managers/views/iframe.js due to insufficient escaping of user-submitted data. Used in the EPUB rendering library; impact is cross-site scripting. Public references indicate the fix is in v0.3.89 (upstream...

CVE-2021-33040

managers/views/iframe.js in FuturePress EPub.js before 0.3.89 allows XSS...

PT-2022-10194

Name of the Vulnerable Software and Affected Versions FuturePress EPub.js versions prior to 0.3.89 Description The issue allows for XSS due to a problem in the managers/views/iframe.js file. Recommendations For versions prior to 0.3.89, update to version 0.3.89 or later to resolve the issue...

CVE-2021-33040: Improper Neutralization of Input During Web Page Generation

managers/views/iframe.js in FuturePress EPub.js before 0.3.89 allows XSS...

Cross-site Scripting (XSS) in Apache Ambari Views

A cross-site scripting issue was found in Apache Ambari Views. This was addressed in Apache Ambari 2.7.4...

CVE-2021-41871

An issue was discovered in Socomec REMOTE VIEW PRO 2.0.41.4. Improper validation of input into the username field makes it possible to place a stored XSS payload. This is executed if an administrator views the System Event Log...

CVE-2021-42363

The Preview E-Mails for WooCommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the searchorder parameter found in the /views/form.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.6.8...

CVE-2021-42363: Improper Neutralization of Input During Web Page Generation

The Preview E-Mails for WooCommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the searchorder parameter found in the /views/form.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.6.8...

PT-2021-23595

Name of the Vulnerable Software and Affected Versions Preview E-Mails for WooCommerce WordPress plugin versions up to and including 1.6.8 Description The issue allows attackers to inject arbitrary web scripts via the search order parameter found in the /views/form.php file, enabling Reflected...

PT-2021-23648

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Event Booking and Reservation System in PHP affected versions not specified Description A SQL Injection issue exists in the event-management/views component, allowing an attacker to manipulate SQL queries. This can lead t...

Engineers Online Portal SQL注入漏洞

Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by three types of users, namely system administrators, students, and instructors. sourcecodester Online Event Booking and...