CVE-2022-40691

An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the themes.NoPagefilename, theme function due to improper user input sanitization. Exploiting this vulnerability is possible when a file/resource is not found. PoC bash go install...

Online Food Ordering System 跨站脚本漏洞

Online Food Ordering System is an online food ordering system. A cross-site scripting vulnerability exists in Online Food Ordering System, which is caused by the lack of effective filtering and escaping of user-supplied data in the page parameter of navbar.php page, which can be exploited to caus...

MOXA SDS-3008 跨站脚本漏洞

Moxa SDS-3008 is a series of industrial switches from MOXA China. The Moxa SDS-3008 suffers from a cross-site scripting vulnerability that can be exploited by an attacker to send a specially crafted HTTP request resulting in arbitrary Javascript execution...

dst-admin 命令注入漏洞

dst-admin is a web program written in Java by qinming99, an individual developer. A command injection vulnerability exists in dst-admin version 1.5.0, which stems from an unknown function in the file /home/kickPlayer that can be injected with the parameter userId...

Forget Heart Message Box SQL注入漏洞

Forget Heart Message Box is a message site. v1.1 of Forget Heart Message Box contains a security vulnerability that originates from a SQL injection vulnerability found through the name parameter in /admin/loginpost.php. No detailed vulnerability details are available at this time...

CVE-2022-44025

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting XSS, issue 2 of 6...

CVE-2023-23949

An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser...

CVE-2023-23024

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the writer parameter...

CVE-2022-41441

Multiple cross-site scripting XSS vulnerabilities in ReQlogic v11.3 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the POBatch and WaitDuration parameters...

CVE-2022-45613

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the publisher parameter...

GENI Portal 跨站脚本漏洞

GENI Portal is a web tool from GENI for managing geni resource reservations. A cross-site scripting vulnerability exists in GENI Portal, which stems from the fact that incorrect manipulation of the parameter error can lead to cross-site scripting...

Pimcore 跨站脚本漏洞

Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce frameworks and product information management applications. cross-site scripting vulnerabilities exist...

PT-2023-16158 · Sourcecodester · Sourcecodester Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System affected versions not specified Description: A critical issue was found in the SourceCodester Online Food Ordering System, affecting some unknown functionality of the file view prod.php. The...

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multilingual, fully database-driven FAQ system. phpMyFAQ versions prior to 3.1.10 are vulnerable to a cross-site scripting vulnerability that stems from the presence of stored cross-site scripting XSS. No detailed vulnerability details are currently available...

CVE-2023-0287 ityouknow favorites-web Comment cross site scripting

A vulnerability was found in ityouknow favorites-web. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Comment Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the...

WordPress plugin Media Library Folders 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

zerochplus 跨站脚本漏洞

zerochplus is zerochplus open source a threaded floating bulletin board script compatible with 2ch. A cross-site scripting vulnerability exists in zerochplus. Attackers exploit this vulnerability to perform cross-site scripting attacks...

backdrop-contrib Basic Cart 跨站脚本漏洞

backdrop-contrib Basic Cart is a cms site for individual developers. A cross-site scripting vulnerability exists in backdrop-contrib Basic Cart. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...

eCart Web 4.0.0 Insecure Settings

==================================================================================================================================== | Title : eCart Web v4.0.0- Multi Vendor eCommerce Marketplace Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro /...