CVE-2023-1050

CVE-2023-1050 affects the As Koc Energy Web Report System prior to version 23.03.10. The vulnerability is an improper neutralization of special elements used in an SQL command, i.e., an SQL Injection in the web report system. The CVSS data indicates a high-impact attack with network access, no us...

CVE-2023-1050 SQLi in As Koc Web Report System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in As Koc Energy Web Report System allows SQL Injection. This issue affects Web Report System: before 23.03.10...

CVE-2023-1050 SQLi in As Koc Web Report System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in As Koc Energy Web Report System allows SQL Injection. This issue affects Web Report System: before 23.03.10...

AsKoc Energy Web Report System 跨站脚本漏洞

AsKoc Energy Web Report System is a Web site of AsKoc Inc. A security vulnerability exists in the AsKoc Energy Web Report System prior to version 23.03.10, which is a reflective cross-site scripting vulnerability that stems from an improper neutralization of input during web page generation...

PT-2023-16719 · Unknown · Koc Energy Web Report System

Name of the Vulnerable Software and Affected Versions: As Koc Energy Web Report System versions prior to 23.03.10 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations: For...

PT-2023-16718 · Unknown · Koc Energy Web Report System

Name of the Vulnerable Software and Affected Versions: As Koc Energy Web Report System versions prior to 23.03.10 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

AsKoc Energy Web Report System SQL注入漏洞

AsKoc Energy Web Report System is a website of AsKoc Inc. A security vulnerability exists in AsKoc Energy Web Report System versions prior to 23.03.10 that stems from an improper neutralization of a particular element used and a SQL injection vulnerability...

critmouse.ru Cross Site Scripting vulnerability OBB-2737170

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-25256

SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfsrequestbacklabellist and saspfsrequestbackurllist. The first one affects the content of the button placed in the top left. The second affects the page to which the user is directed after pressing...

CVE-2022-25256

SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfsrequestbacklabellist and saspfsrequestbackurllist. The first one affects the content of the button placed in the top left. The second affects the page to which the user is directed after pressing...

CVE-2022-25256

SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfsrequestbacklabellist and saspfsrequestbackurllist. The first one affects the content of the button placed in the top left. The second affects the page to which the user is directed after pressing...

Cross site scripting

SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfsrequestbacklabellist and saspfsrequestbackurllist. The first one affects the content of the button placed in the top left. The second affects the page to which the user is directed after pressing...

CVE-2022-25256

SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfsrequestbacklabellist and saspfsrequestbackurllist. The first one affects the content of the button placed in the top left. The second affects the page to which the user is directed after pressing...

CVE-2022-25256

CVE-2022-25256 affects SAS Web Report Studio 4.4. The flaw is an XSS in /SASWebReportStudio/logonAndRender.do mediated by two parameters, saspfs_request_backlabel_list and saspfs_request_backurl_list. The second parameter can route to a malicious page and can execute JavaScript via a javascript: ...

Sas Institute Sas Web Report Studio 跨站脚本漏洞

Sas Institute Sas Web Report Studio is a web application from Sas Institute, Inc. It is used to view, interact with, create, and distribute public and private reports. A cross-site scripting vulnerability exists in Sas Institute Sas Web Report Studio, which stems from Do having two parameters:...

Jenkins 代码问题漏洞

Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plug-ins to support building, deploying and automating any project . A code issue vulnerability exists in Jenkins Selenium HTML report Plugin 1.0 and earlier versions that stems from the...

CVE-2019-17634

Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a cross site scripting XSS vulnerability when generating an HTML report from a malicious heap dump. The user must chose todownload, open the malicious heap dump and generate an HTML report for the problem to occur. The heap dump coul...

Sahi Pro 8.x SQL Injection

Exploit Title: Sahi pro :/s/dyn/pro/DBReports?sql=SELECT DISTINCT memoryused AS ROWSTATUS, SCRIPTREPORTS.SCRIPTREPORTID,SCRIPTREPORTS.SCRIPTNAME,SUITEREPORTS. FROM SUITEREPORTS,SCRIPTREPORTS...

IBM BigFix Platform Web Report Component Information Disclosure Vulnerability

IBM BigFix Platform is a dynamic set of IBM's integrated messaging content-driven and management system for multi-technology platforms. web report compoment is one of the web reporting component. An information disclosure vulnerability exists in the Web Report component of the IBM BigFix Platform...

IBM BigFix Platform Cross-Site Scripting Vulnerability

IBM BigFix Platform is a dynamic set of IBM's integrated messaging content-driven and management system for multi-technology platforms.Web Report compoment is one of the Web reporting component. A cross-site scripting vulnerability exists in the Web Report component in IBM BigFix Platform version...