CVE-2023-39734

The leakage of the client secret in VISION MEAT WORKS TrackDiner10/10mc Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

PT-2023-27091 · Unknown · Vision Meat Works Trackdiner10/10 Mc Line

Name of the Vulnerable Software and Affected Versions: VISION MEAT WORKS TrackDiner10/10 mc Line version 13.6.1 Description: The leakage of the client secret allows attackers to obtain the channel access token and send crafted broadcast messages. Recommendations: For version 13.6.1, consider...

CVE-2023-39734

CVE-2023-39734 affects VISION MEAT WORKS TrackDiner10/10_mc Line v13.6.1. The leakage of the client secret can allow an attacker to obtain the channel access token and send crafted broadcast messages, with CVSS 3.1 base score 8.2 (HIGH) and attack vector NETWORK, complexity LOW, user interaction ...

thamesagencyworks.com Cross Site Scripting vulnerability OBB-3661383

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: IBM Sterling Global Mailbox is vulnerable to arbitrary command execution due to com.ibm.ws.org.apache.commons.collections (CVE-2015-7501)

Summary A security vulnerability has been identified and addressed in com.ibm.ws.org.apache.commons.collections.3.2.1-1.0.9.jar shipped with IBM Sterling Global Mailbox. Vulnerability Details CVEID:CVE-2015-7501 DESCRIPTION: Red Hat JBoss A-MQ 6.x; BPM Suite BPMS 6.x; BRMS 6.x and 5.x; Data Grid...

LINE WORKS Drive Explorer vulnerable to code injection

Overview LINE WORKS Drive Explorer provided by WORKS MOBILE Japan Corp. contains a code injection vulnerability CWE-94. Koh M. Nakagawa reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An attacker who can log...

JVN#01937209: LINE WORKS Drive Explorer vulnerable to code injection

LINE WORKS Drive Explorer provided by WORKS MOBILE Japan Corp. contains a code injection vulnerability CWE-94. Impact An attacker who can login to the client where the affected product is installed may inject arbitrary code while processing the product execution. Since a full disk access privileg...

my-site 跨站脚本漏洞

my-site is WinterChenS personal developer's springboot2.0 based development of personal Web site , integrated : personal home page , personal blog , personal works . WinterChenS my-site has a security vulnerability that stems from the presence of a cross-site scripting XSS vulnerability that allo...

CVE-2022-37462

A stored Cross-Site Scripting XSS vulnerability in the Chat gadget in Upstream Works Agent Desktop for Cisco Finesse through 4.2.12 and 5.0 allows remote attackers to inject arbitrary web script or HTML via AttachmentId in the file-upload details...

Cisco Finesse 跨站脚本漏洞

Cisco Finesse is a suite of call center management software from Cisco. A security vulnerability exists in Upstream Works for Cisco Finesse version 4.2.12 and earlier, and version 5.x prior to 5.3, which stems from the presence of a stored cross-site scripting XSS vulnerability...

CVE-2022-37462

CVE-2022-37462 describes a stored XSS in the Chat gadget of Upstream Works Agent Desktop for Cisco Finesse via the AttachmentId in file-upload details. Affected: Upstream Works Agent Desktop for Cisco Finesse versions 4.2.12 and earlier, and 5.0. Root cause: insecure handling of AttachmentId in f...

CVE-2023-1795

A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/products/index.php of the component GET Parameter Handler. The manipulation of the argument view with the input...

CVE-2023-1795

A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/products/index.php of the component GET Parameter Handler. The manipulation of the argument view with the input...

Cross site scripting

A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/products/index.php of the component GET Parameter Handler. The manipulation of the argument view with the input...

CVE-2023-1795

SourceCodester Gadget Works Online Ordering System 1.0 contains a cross-site scripting (XSS) vulnerability in the GET Parameter Handler for the /admin/products/index.php endpoint. The issue arises from manipulating the view parameter with input such as , which can be exploited remotely and for wh...

CVE-2023-1795 SourceCodester Gadget Works Online Ordering System GET Parameter index.php cross site scripting

A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/products/index.php of the component GET Parameter Handler. The manipulation of the argument view with the input...

Online Ordering System 跨站脚本漏洞

Online Ordering System is a multi-store ordering system for janobe individual developers. It can be used for any small business. A security vulnerability exists in SourceCodester Gadget Works Online Ordering System version 1.0, which stems from unknown processing in the file...

PT-2023-17253 · Sourcecodester · Sourcecodester Gadget Works Online Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Gadget Works Online Ordering System version 1.0 Description: A problem was found in the processing of the file /admin/products/index.php, specifically in the GET Parameter Handler component. The issue can be exploited by...

thamesagencyworks.com Cross Site Scripting vulnerability OBB-3234951

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-1433

A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file admin/products/controller.php?action=add of the component Products Handler. The manipulation of the argument filename leads to...