1604 matches found
CVE-2021-38713
imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header...
CVE-2021-38713
imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header...
CVE-2021-38713
The CVE-2021-38713 entry concerns imgURL 2.31, where a cross-site scripting (XSS) vulnerability can be triggered via the X-Forwarded-For HTTP header. Public references and multiple security trackers (Red Hat, GHSA, OSV, NVD, CNVD, etc.) consistently describe imgURL 2.31 as vulnerable to XSS throu...
PT-2021-22274
Name of the Vulnerable Software and Affected Versions imgURL version 2.31 Description The issue allows for XSS Cross-Site Scripting attacks via the X-Forwarded-For HTTP header. Recommendations For imgURL version 2.31, consider restricting access to the X-Forwarded-For HTTP header to minimize the...
CVE-2021-38713: Improper Neutralization of Input During Web Page Generation
imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header...
Authorization Bypass
nilsteampassnet/teampass is vulnerable to authorization bypass. Sending an X-Forwarded-For client HTTP header to the getIp function allows any users with a valid API token to bypass IP address whitelist restrictions...
GHSA-FV48-HJHP-94C7 Incorrect Authorization in TeamPass
The REST API functions in TeamPass 2.1.27.36 allow any user with a valid API token to bypass IP address whitelist restrictions via an X-Forwarded-For client HTTP header to the getIp function...
CVE-2021-36755
Nightscout Web Monitor aka cgm-remote-monitor 14.2.2 allows XSS via a crafted X-Forwarded-For header...
CVE-2021-36755: Improper Neutralization of Input During Web Page Generation
Nightscout Web Monitor aka cgm-remote-monitor 14.2.2 allows XSS via a crafted X-Forwarded-For header...
PT-2021-21339
Name of the Vulnerable Software and Affected Versions Nightscout Web Monitor aka cgm-remote-monitor version 14.2.2 Description The issue allows for XSS via a crafted X-Forwarded-For header. This means an attacker could potentially inject malicious scripts into the website, affecting users who...
CVE-2020-29146
A cross site scripting XSS vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a constructed payload created by adding the X-Forwarded-For field to the header...
CVE-2020-29146
A cross site scripting XSS vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a constructed payload created by adding the X-Forwarded-For field to the header...
Cross site scripting
A cross site scripting XSS vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a constructed payload created by adding the X-Forwarded-For field to the header...
CVE-2020-29146
A cross site scripting XSS vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a constructed payload created by adding the X-Forwarded-For field to the header...
CVE-2020-29146
A cross site scripting XSS vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a constructed payload created by adding the X-Forwarded-For field to the header...
CVE-2020-29146: Improper Neutralization of Input During Web Page Generation
A cross site scripting XSS vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a constructed payload created by adding the X-Forwarded-For field to the header...
CVE-2020-18979
Cross Siste Scripting XSS vulnerablity in Halo 0.4.3 via the X-forwarded-for Header parameter...
CVE-2020-18979
Cross Siste Scripting XSS vulnerablity in Halo 0.4.3 via the X-forwarded-for Header parameter...