7 matches found
EUVD-2022-51700
Malicious code in bioql PyPI...
Cross site scripting
A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has bee...
CVE-2022-4347: Improper Neutralization
A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has bee...
CVE-2022-4347 xiandafu beetl-bbs WebUtils.java cross site scripting
A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has bee...
CVE-2022-4347
The CVE-2022-4347 entry concerns xiandafu beetl-bbs WebUtils.java and a cross-site scripting vulnerability. The known issue is that manipulating the user argument can trigger XSS, with remote exploitation and a publicly disclosed exploit. The connected documents provide no product version ranges ...
PT-2022-26931 · Unknown · Xiandafu Beetl-Bbs
Name of the Vulnerable Software and Affected Versions: xiandafu beetl-bbs affected versions not specified Description: A vulnerability was found in xiandafu beetl-bbs, affecting an unknown functionality of the file WebUtils.java. The manipulation of the user argument leads to cross-site scripting...
CVE-2022-4347 xiandafu beetl-bbs WebUtils.java cross site scripting
A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has bee...