Lucene search
K

14 matches found

ATTACKERKB
ATTACKERKB
added 2023/11/27 5:15 p.m.0 views

CVE-2023-49028

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user parameter in the lock/lock.php file...

5.4CVSS6.2AI score0.00312EPSS
Exploits1References4
OSV
OSV
added 2023/11/27 5:15 p.m.1 views

CVE-2023-49028

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user parameter in the lock/lock.php file...

5.4CVSS6.1AI score
Exploits0References3
NVD
NVD
added 2023/11/27 5:15 p.m.12 views

CVE-2023-49028

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user parameter in the lock/lock.php file...

5.4CVSS0.00312EPSS
Exploits1References3
Prion
Prion
added 2023/11/27 5:15 p.m.13 views

Cross site scripting

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user parameter in the lock/lock.php file...

4.9CVSS7.6AI score0.00312EPSS
Exploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/11/27 4:15 p.m.1 views

CVE-2023-49029

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the nama parameter in the lock/lock.php file...

6.1CVSS6.2AI score0.00318EPSS
Exploits1References4
OSV
OSV
added 2023/11/27 4:15 p.m.2 views

CVE-2023-49029

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the nama parameter in the lock/lock.php file...

6.1CVSS6.1AI score
Exploits0References3
CNNVD
CNNVD
added 2023/11/27 12:0 a.m.1 views

SMPN 1 Semarang absis security vulnerability

absis is an open source web-based K13/KTSP academic system from SMPN 1 Semarang. A security vulnerability exists in SMPN 1 Semarang absis v.2017-10-19 and earlier versions, which stems from a cross-site scripting XSS vulnerability in the user parameter of the lock/lock.php file...

5.4CVSS5.7AI score0.00312EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/11/27 12:0 a.m.13 views

CVE-2023-49028

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user parameter in the lock/lock.php file...

6AI score0.00312EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/11/27 12:0 a.m.4 views

PT-2023-31031 · Unknown · Smpn1Smg Absis

Name of the Vulnerable Software and Affected Versions: smpn1smg absis versions 2017-10-19 and earlier Description: The issue allows a remote attacker to execute arbitrary code via the nama parameter in the "lock/lock.php" file. This is a Cross Site Scripting vulnerability. Recommendations: For...

6.1CVSS6.3AI score0.00318EPSS
Exploits1References5
CVE
CVE
added 2023/11/27 12:0 a.m.31 views

CVE-2023-49028

The CVE-2023-49028 entry concerns a Cross Site Scripting vulnerability in the open-source system SMPN 1 Semarang absis, affected in versions up to 2017-10-19. The vulnerability is triggered via the user parameter in the file lock/lock.php, and is described as allowing a remote attacker to execute...

5.4CVSS5.8AI score0.00312EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2023/11/27 12:0 a.m.2 views

SMPN 1 Semarang absis security vulnerability

absis is an open source web-based K13/KTSP academic system from SMPN 1 Semarang. A security vulnerability exists in SMPN 1 Semarang absis v.2017-10-19 and earlier versions, which stems from a cross-site scripting XSS vulnerability in the nama parameter in the lock/lock.php file...

6.1CVSS5.7AI score0.00318EPSS
Exploits1References3
CVE
CVE
added 2023/11/27 12:0 a.m.31 views

CVE-2023-49029

CVE-2023-49029 affects smpn1smg absis v.2017-10-19 and earlier. The vulnerability is a Cross Site Scripting flaw in the nama parameter of lock/lock.php, allowing a remote attacker to execute arbitrary code. Impact is described as arising from XSS; CVSS v3.1 base score 6.1 (Medium). No explicit pa...

6.1CVSS6.4AI score0.00318EPSS
Exploits1References3Affected Software1
Snyk
Snyk
added 2023/01/29 3:29 p.m.1 views

Malicious Package

Overview @absis/core-service is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...

9.8CVSS7.1AI score
Exploits0References3
Snyk
Snyk
added 2023/01/29 3:29 p.m.1 views

Malicious Package

Overview @absis-components/ui-core-elements is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerabl...

9.8CVSS7.1AI score
Exploits0References3
Rows per page
Query Builder