Moodle cross-site scripting vulnerability (CNVD-2019-43885)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A cross-site scripting vulnerability exists in Moodle, which stems from the lack of proper validation of client-side data in the WEB...

AngularJS Cross-Site Scripting Vulnerability

AngularJS is a TypeScript-based open source web application framework. A cross-site scripting vulnerability exists in AngularJS, which stems from the lack of proper validation of client-side data in a WEB application and can be exploited by an attacker to execute client-side code...

SAP Financial Consolidation Cross-Site Scripting Vulnerability

SAP Financial Consolidation is a financial statement solution from SAP. The product is designed to automate intercompany reconciliations and offsets, currency conversions, and provide financial statement generation. A cross-site scripting vulnerability exists in SAP Financial Consolidation. The...

TemaTres 3.0 - value Persistent Cross-site Scripting

TemaTres 3.0 - value Persistent Cross-site Scripting Exploit Title: TemaTres 3.0 - 'value' Persistent Cross-site Scripting Author: Pablo Santiago Date: 2019-11-14 Vendor Homepage: https://www.vocabularyserver.com/ Source:...

TemaTres 3.0 - Cross-Site Request Forgery (Add Admin) Exploit

Exploit for php platform in category web applications Exploit Title: TemaTres 3.0 — Cross-Site Request Forgery Add Admin Author: Pablo Santiago Date: 2019-11-14 Vendor Homepage: https://www.vocabularyserver.com/ Source:...

TemaTres 3.0 Cross Site Request Forgery

Exploit Title: TemaTres 3.0 — Cross-Site Request Forgery Add Admin Author: Pablo Santiago Date: 2019-11-14 Vendor Homepage: https://www.vocabularyserver.com/ Source: https://sourceforge.net/projects/tematres/files/TemaTres%203.0/tematres3.0.zip/download Version: 3.0 CVE : 2019–14345...

TemaTres 3.0 - Cross-Site Request Forgery (Add Admin)

Exploit Title: TemaTres 3.0 — Cross-Site Request Forgery Add Admin Author: Pablo Santiago Date: 2019-11-14 Vendor Homepage: https://www.vocabularyserver.com/ Source: https://sourceforge.net/projects/tematres/files/TemaTres%203.0/tematres3.0.zip/download Version: 3.0 CVE : 2019–14345...

WordPress Blog2Social Plugin < 5.9.0 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113569";...

Code execution vulnerability in SeaCMS backend (CNVD-2019-45339)

SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. There is a code execution vulnerability in the background of SeaCMS, which can be exploited by attackers to execute malicious code...

SQL Injection Vulnerability in 162100 Simple Forum System of Shenyang Huanggu District Ainong Network Technology Service Center (CNVD-2020-00002)

Huanggu District, Shenyang City, love thick network technology service center simple forum system is a forum website building system. Shenyang Huanggu District, Shenyang City, love thick network technology service center 162100 simple forum system there are SQL injection vulnerabilities, attacker...

RISE Ultimate Project Manager Cross-Site Request Forgery Vulnerability

RISE Ultimate Project Manager is used to manage projects, clients and team members. A cross-site request forgery vulnerability exists in index.php/teammembers/addteammember in RISE Ultimate Project Manager 2.3, which can be exploited by an attacker to add authorized users...

SQL Injection Vulnerability in SeaCMS Backend (CNVD-2019-45360)

SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. There is a SQL injection vulnerability in the background of SeaCMS, which can be exploited by attackers to obtain sensitive database information...

CVE-2019-18793

CVE-2019-18793 affects Parallels Plesk Panel 9.5 with a stored/reflected XSS in target/locales/tr-TR/help/index.htm? via the fileName parameter. The issue is a cross-site scripting flaw in that specific page, allowing injected script to be treated as part of the web page. Several connected source...

Cisco TelePresence Advanced Media Gateway Denial of Service Vulnerability

Cisco TelePresence Advanced Media Gateway is a high-definition multimedia gateway device from Cisco USA. A security vulnerability exists in the web application in Cisco TelePresence Advanced Media Gateway, which stems from a lack of input validation in the program. A remote attacker could exploit...

CVE-2019-18926

Systematic IRIS Standards Management ISM v2.1 SP1 89 is vulnerable to unauthenticated reflected Cross Site Scripting XSS. A user input related to dialog information is reflected directly in the web page, allowing a malicious user to conduct a Cross Site Scripting attack against users of the...

Pagure Cross-Site Scripting Vulnerability (CNVD-2020-17195)

Pagure is a Git repository written in Python to provide Web services. Pagure suffers from a cross-site scripting vulnerability. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-side cod...

Computrols CBAS-Web 19.0.0 - username Reflected Cross-Site Scripting

Computrols CBAS-Web 19.0.0 - username Reflected Cross-Site Scripting Exploit Title: Computrols CBAS-Web 19.0.0 - 'username' Reflected Cross-Site Scripting Google Dork: NA Date: 2018-09-06 Exploit Author: LiquidWorm Vendor Homepage: https://www.computrols.com/capabilities-cbas-web/ Software Link:...

LavaLite CMS 5.7 Cross Site Scripting

Exploit Title: LavaLite CMS - 5.7 - Cross-Site Scripting Date: 09-10-2019 Exploit Author: Ismail Tasdelen Vendor Homepage: https://lavalite.org/ Software Link : https://github.com/LavaLite/cms Software : LavaLite CMS - v 5.7 Version : v 5.7 Vulernability Type : Cross-site Scripting Vulenrability ...

threat_note - DPS' Lightweight Investigation Notebook

threatnote is a web application built by Defense Point Security to allow security researchers the ability to add and retrieve indicators related to their research. As of right now this includes the ability to add IP Addresses, Domains and Threat Actors, with more types being added in the future...

IBM QRadar SIEM Cross-Site Scripting Vulnerability (CNVD-2019-44941)

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. A cross-site...