The vulnerability of D-Link DGS-1510 network device’s microprogramming software lies in the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the D-Link DGS-1510 network device’s microprogramming software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack remotely...

F5 BIG-IP 跨站脚本漏洞

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A cross-site scripting vulnerability exists in F5 BIG-IP, which can be exploited by an attacker to trigger cross-site scriptin...

CVE-2020-29257

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the q parameter to feedback.php...

Siemens XHQ Cross-Site Scripting Vulnerability (CNVD-2020-70928)

Siemens XHQ is a software platform that aggregates plant or pipeline operational data, processes it in a goal-oriented manner, and then makes decisions in real time to effectively improve plant or pipeline operational performance. A cross-site scripting vulnerability exists in Siemens XHQ version...

VestaCP 0.9.8-26 - 'backup' Information Disclosure

Exploit Title: VestaCP 0.9.8-26 - 'backup' Information Disclosure Date: 2020-11-25 Exploit Author: Vulnerability-Lab Vendor Homepage: https://vestacp.com/ Software Link: https://vestacp.com/install/ Version: 0.9.8-26 Document Title: =============== VestaCP v0.9.8-26 - Insufficient Session...

Perfex CRM 2.4.4 Cross Site Scripting

Document Title: =============== Perfex v2.4.4 CRM - Print Persistent Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2231 Release Date: ============= 2020-06-24 Vulnerability Laboratory ID VL-ID: ==================================== 22...

CVE-2020-13543

A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web page can trigger a use-after-free vulnerability which can lead to remote code execution. An attacker can get a user to visit a webpage to trigger this vulnerability...

CVE-2020-29239

Online Birth Certificate System Project V 1.0 is affected by cross-site scripting XSS. This vulnerability can result in an attacker injecting the XSS payload in the User Registration section. When an admin visits the View Detail of Application section from the admin panel, the attacker can able t...

ThinkAdmin 跨站脚本漏洞

ThinkAdmin is a backend administration framework developed based on the latest ThinkPHP V6 , using the MIT protocol open source. thinkAdmin v1, v6 exists a stored cross-site scripting vulnerability. A remote attacker can use the vulnerability to inject arbitrary Web script or HTML...

Zxelink Wireless Controller SQL注入漏洞

The ZXV10 W908 is a wireless access controller from ZXELINK. A SQL injection vulnerability exists in versions prior to ZXELINK ZXV10 W908 MIPSA1022IPV6R3T6P7Y20. The vulnerability stems from the device failing to properly filter parameters. An attacker can exploit the vulnerability by sending...

CVE-2020-17901

Cross-site request forgery CSRF in PbootCMS 1.3.2 allows attackers to change the password of a user...

VestaCP v0.9.8-26 - (LoginAs) Token Session Vulnerability

Document Title: =============== VestaCP v0.9.8-26 - LoginAs Token Session Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2240 Release Date: ============= 2020-11-26 Vulnerability Laboratory ID VL-ID: ====================================...

Hrsale Cross-Site Scripting Vulnerability

Hrsale is an HRMS written in PHP by the Hrsale team. A cross-site scripting vulnerability exists in HRSALE 2.0.0. The vulnerability can be exploited by an attacker to conduct a cross-site scripting attack via the admin/project/projectscalendar setdate parameter...

News Script PHP Pro SQL Injection Vulnerability

News Script PHP Pro is a PHP/MySQL based web script from Simple PHP Scripts for displaying news on your website. News Script PHP Pro 2.3 suffers from a SQL injection vulnerability. The vulnerability can be exploited to conduct SQL injection attacks via the id parameter in the editNews action...

VestaCP v0.9.8-26 - Session Validation Web Vulnerability

Document Title: =============== VestaCP v0.9.8-26 - Session Validation Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2238 Release Date: ============= 2020-11-25 Vulnerability Laboratory ID VL-ID: ====================================...

SQL injection vulnerability in yycms yy***_us***.php file

yycms is a movie and television system. The yycms yyus.php file suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...

Puncsky Touchbase.ai cross-site scripting vulnerability (CNVD-2020-66598)

Puncsky Touchbase.ai is a web platform for interpersonal relationships by Puncsky Individual Developers. A cross-site scripting vulnerability exists in versions prior to touchbase.ai 2.0, which can be exploited by an attacker to send malicious JavaScript code that hijacks a user's cookie session...

KonaWiki 跨站脚本漏洞

KonaWiki3 is a very simple PHP Wiki engine.KonaWiki3 is vulnerable to cross-site scripting. An attacker can exploit this vulnerability to execute arbitrary scripts on a user's Web browser via specially crafted URLs...

SourceCodester Online Clothing Store Code Issue Vulnerability

SourceCodester Online Clothing Store is a website builder system from SourceCodester, Inc. that provides online clothing store functionality. A security vulnerability exists in SourceCodester Online Clothing Store version 1.0, which is caused by an arbitrary file upload in the image upload functi...

Code Projects Artworks Gallery Code Issues Vulnerabilities

Code Projects Artworks Gallery is an online artwork management website builder organized by Code Projects. A security vulnerability in ARTWORKS GALLERY, which exists within the Edit Configuration File feature in PHP, CSS, JAVASCRIPT, and MYSQL 1.0, can be exploited by remote attackers to upload...