PT-2023-10127 · Unknown · Mrobit Robitailletheknot

Name of the Vulnerable Software and Affected Versions: mrobit robitailletheknot affected versions not specified Description: A vulnerability was found in the component CSRF Token Handler, affecting an unknown part of the file app/filters.php. The manipulation of the argument token leads to...

maccms10 跨站脚本漏洞

maccms10 is magicblack open source PHP+MYSQL environment using a set of perfect and powerful rapid site-building system . maccms10 v2022.1000.3032 version of cross-site scripting XSS vulnerabilities. A cross-site scripting XSS vulnerability exists in maccms10 version v2022.1000.3032, which...

Sql injection

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacker could exploit these vulnerabilities...

PT-2023-4802 · Unknown · Ckeditor Integration Ui +1

Name of the Vulnerable Software and Affected Versions: CKEditor Integration UI versions prior to 1.64.3 XWiki Platform versions prior to 14.6 RC1 Description: The issue is related to insufficient authentication checks for executed requests in the CKEditor integration interface of the XWiki...

WEIPDCRM 跨站脚本漏洞

WEIPDCRM is a Cydia repo manager open-sourced by 82Flex. A cross-site scripting vulnerability exists in WEIPDCRM. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

Lead management system SQL注入漏洞

Lead management system is a lead management system developed by Mayuri K. The Lead Management System version 1.0 is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the login.php parameter username, and can be exploited by attackers to The...

nsupdate.info 安全漏洞

nsupdate.info is a free dynamic DNS service in the nsupdate.info development open source. A security vulnerability exists in nsupdate.info, which stems from a mishandling of the parameter CSRFCOOKIEHTTPONLY that results in a cookie without the "httponly" flag...

CVE-2022-47928

In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/uploadfile.ctp...

CVE-2022-46095

Sourcecodester Covid-19 Directory on Vaccination System 1.0 was discovered to contain a Cross-Site Scripting XSS vulnerability via verification.php because the program does not verify the txtvaccinationID parameter...

Cross-site Scripting (XSS)

Overview smoothie is a Smoothie Charts: smooooooth JavaScript charts for realtime streaming data Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper user input sanitization in strokeStyle and tooltipLabel properties. Exploiting this vulnerability is possib...

CVE-2022-38756

A vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes a request to the Post Office Agent that contains sensitive information in the query parameters that could be logged by any intervening HTTP proxies...

Japan Construction Information Center DENSHI NYUSATSU CORE SYSTEM 跨站脚本漏洞

Japan Construction Information Center DENSHI NYUSATSU CORE SYSTEM is a construction core management system from Japan Construction Information Center, Inc. A security vulnerability exists in the Japan Construction Information Center DENSHI NYUSATSU CORE SYSTEM that could allow an attacker to...

CVE-2022-46119

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=categories&c=...

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a content management solution from Adobe that can be used to build websites, mobile applications and forms. The solution supports mobile content management, marketing and sales campaign management, and multi-site management, etc. A cross-site scripting vulnerabilit...

Falling Fruit Web 跨站脚本漏洞

Falling Fruit Web is a Falling Fruit open source website for mapping the world's edible plants. A security vulnerability exists in Falling Fruit Web that stems from the presence of unknown code that can be manipulated to cause cross-site scripting...

Online Leave Management System 跨站脚本漏洞

Sourcecodester Online Leave Management System is an online leave management system. A security vulnerability exists in Online Leave Management System v1.0, which originates from a stored cross-site scripting XSS vulnerability in the component /leavesystem/admin/?page=maintenance/department. The...

Fortinet FortiOS 跨站脚本漏洞

Fortinet FortiOS is a security operating system from Fortinet, a US-based company dedicated to the FortiGate network security platform. A cross-site scripting vulnerability exists in Fortinet FortiOS, which stems from improper input neutralization during web page generation and could be exploited...

CVE-2022-45769

CVE-2022-45769 is a cross-site scripting (XSS) vulnerability in ClicShopping_V3 v3.402 that allows attackers to execute arbitrary web scripts or HTML via a crafted URL parameter. Documents identify the affected component as ClicShopping_V3, version 3.402, with the underlying issue enabling user-i...

PT-2022-26581 · Sourcecodester · Sourcecodester Human Resource Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Management System version 1.0 Description: A problematic issue has been discovered, affecting an unknown function of the file /hrm/employeeview.php. The manipulation of the search argument leads to cross-site...