golang: html/template: backticks not treated as string delimiters

A flaw was found in Golang Go. This flaw allows a remote attacker to execute arbitrary code on the system, caused by not properly considering backticks as Javascript string delimiters. By sending a specially crafted request, an attacker execute arbitrary code on the system...

golang: html/template: improper handling of JavaScript whitespace

A flaw was found in golang, where not all valid JavaScript white-space characters were considered white space. Due to this issue, templates containing white-space characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be...

EARCLINK ESPCMS 安全漏洞

Honghu Erchuang Netlink Information Technology EARCLINK ESPCMS is an enterprise website building system of China Honghu Erchuang Netlink Information Technology Company. A security vulnerability exists in EARCLINK ESPCMS P8, which was discovered via the fetchfilename function in...

Malicious code in misk-web-tab-template-basic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af5ad7e61d179d5150addce9f3bd9838c06999a4f076ed576677b36505796638 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-PP4C-2692-7F37 Plone Cross-site Scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in an unspecified page template in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2015-2793

Cross-site scripting XSS vulnerability in templates/openid-selector.tmpl in ikiwiki before 3.20150329 allows remote attackers to inject arbitrary web script or HTML via the openididentifier parameter in a verify action to ikiwiki.cgi...

Description of the security update for SharePoint Server 2019: October 8, 2019

None None...

2DayBiz - The Web Template Software SQL injection and XSS vulnerability

No description provided by source. $------------------------------------------------------------------------------------------------------------------- $ 2daybiz - The Web Template Software SQL injection and XSS vulnerability $ Author : Sangteamtham $ Home : Hcegroup.net $ Download...

CVE-2010-2509

Multiple cross-site scripting XSS vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject arbitrary web script or HTML via the 1 keyword parameter to category.php and the 2 password parameter to memberlogin.php...

CVE-2010-2510

SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitrary SQL commands via the tid parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject arbitrary web script or HTML via the 1 keyword parameter to category.php and the 2 password parameter to memberlogin.php...

CVE-2010-2509

The CVE-2010-2509 entries describe cross-site scripting vulnerabilities in 2daybiz Web Template Software. The affected components are the category.php file (parameter: keyword) and memberlogin.php (parameter: password). The underlying issue is improper handling of user-supplied input leading to s...

CVE-2010-2510

The CVE-2010-2510 entry describes a SQL injection in the 2daybiz Web Template Software, specifically in customize.php where the tid parameter is exploited to execute arbitrary SQL commands. The vulnerability enables remote attackers to interact with the underlying database, as indicated by the de...

CVE-2010-2509

Multiple cross-site scripting XSS vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject arbitrary web script or HTML via the 1 keyword parameter to category.php and the 2 password parameter to memberlogin.php...

CVE-2010-2510: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2010-2509: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject arbitrary web script or HTML via the 1 keyword parameter to category.php and the 2 password parameter to memberlogin.php...

2daybiz Web Template Software Cross Site Scripting / SQL Injection

$------------------------------------------------------------------------------------------------------------------- $ 2daybiz - The Web Template Software SQL and XSS vulnerability $ Author : Sangteamtham $ Home : Hcegroup.net $ Download :http://www.2daybiz.com/webtemplatesoftware.html $ Date...

2DayBiz - The Web Template Software SQL Injection & XSS vulnerability

Exploit for php platform in category web applications ===================================================================== 2DayBiz - The Web Template Software SQL Injection & XSS vulnerability =====================================================================...

2DayBiz The Web Template Software - SQL Injection Cross-Site Scripting

2DayBiz The Web Template Software - SQL Injection Cross-Site Scripting $------------------------------------------------------------------------------------------------------------------- $ 2daybiz - The Web Template Software SQL injection and XSS vulnerability $ Author : Sangteamtham $ Home :...

2DayBiz The Web Template Software - SQL Injection / Cross-Site Scripting

$------------------------------------------------------------------------------------------------------------------- $ 2daybiz - The Web Template Software SQL injection and XSS vulnerability $ Author : Sangteamtham $ Home : Hcegroup.net $ Download :http://www.2daybiz.com/webtemplatesoftware.html ...