Lucene search
+L

19 matches found

attackerkb
attackerkb
•added 2023/11/27 5:15 p.m.•7 views

CVE-2023-49028

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user parameter in the lock/lock.php file...

5.4CVSS6.2AI score0.00838EPSS
SaveExploits1References4
OSV
OSV
•added 2023/11/27 5:15 p.m.•16 views

CVE-2023-49028

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user parameter in the lock/lock.php file...

5.4CVSS6.1AI score0.00838EPSS
SaveExploits1References3
NVD
NVD
•added 2023/11/27 5:15 p.m.•24 views

CVE-2023-49028

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user parameter in the lock/lock.php file...

5.4CVSS0.00838EPSS
SaveExploits1References3
Prion
Prion
•added 2023/11/27 5:15 p.m.•27 views

Cross site scripting

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user parameter in the lock/lock.php file...

4.9CVSS7.6AI score0.00838EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2023/11/27 4:15 p.m.•12 views

CVE-2023-49029

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the nama parameter in the lock/lock.php file...

6.1CVSS6.1AI score0.00892EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2023/11/27 4:15 p.m.•8 views

CVE-2023-49029

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the nama parameter in the lock/lock.php file...

6.1CVSS6.2AI score0.00892EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/11/27 12:00 a.m.•13 views

SMPN 1 Semarang absis security vulnerability

absis is an open source web-based K13/KTSP academic system from SMPN 1 Semarang. A security vulnerability exists in SMPN 1 Semarang absis v.2017-10-19 and earlier versions, which stems from a cross-site scripting XSS vulnerability in the user parameter of the lock/lock.php file...

5.4CVSS5.7AI score0.00838EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/11/27 12:00 a.m.•20 views

PT-2023-31031 · Unknown · Smpn1Smg Absis

Name of the Vulnerable Software and Affected Versions: smpn1smg absis versions 2017-10-19 and earlier Description: The issue allows a remote attacker to execute arbitrary code via the nama parameter in the "lock/lock.php" file. This is a Cross Site Scripting vulnerability. Recommendations: For...

6.1CVSS6.3AI score0.00892EPSS
SaveExploits1References5
Mend
Mend
•added 2023/11/27 12:00 a.m.•2 views

CVE-2023-49029

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the nama parameter in the lock/lock.php file...

6.1CVSS0.00892EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/27 12:00 a.m.•4 views

CVE-2023-49029: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the nama parameter in the lock/lock.php file...

6.1CVSS7AI score0.00892EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/27 12:00 a.m.•5 views

CVE-2023-49028: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user parameter in the lock/lock.php file...

5.4CVSS6.6AI score0.00838EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/11/27 12:00 a.m.•4 views

PT-2023-31030

Name of the Vulnerable Software and Affected Versions smpn1smg absis versions 2017-10-19 and earlier Description The issue allows a remote attacker to execute arbitrary code via the user parameter in the "lock/lock.php" file. This is a result of a Cross Site Scripting vulnerability. Recommendatio...

5.4CVSS6.7AI score0.00838EPSS
SaveExploits1References5
CVE
CVE
•added 2023/11/27 12:00 a.m.•58 views

CVE-2023-49029

CVE-2023-49029 affects smpn1smg absis v.2017-10-19 and earlier. The vulnerability is a Cross Site Scripting flaw in the nama parameter of lock/lock.php, allowing a remote attacker to execute arbitrary code. Impact is described as arising from XSS; CVSS v3.1 base score 6.1 (Medium). No explicit pa...

6.1CVSS7AI score0.00892EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2023/11/27 12:00 a.m.•3 views

CVE-2023-49028

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user parameter in the lock/lock.php file...

5.4CVSS0.00838EPSS
SaveExploits1References3
CVE
CVE
•added 2023/11/27 12:00 a.m.•51 views

CVE-2023-49028

The CVE-2023-49028 entry concerns a Cross Site Scripting vulnerability in the open-source system SMPN 1 Semarang absis, affected in versions up to 2017-10-19. The vulnerability is triggered via the user parameter in the file lock/lock.php, and is described as allowing a remote attacker to execute...

5.4CVSS6.6AI score0.00838EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2023/11/27 12:00 a.m.•18 views

SMPN 1 Semarang absis security vulnerability

absis is an open source web-based K13/KTSP academic system from SMPN 1 Semarang. A security vulnerability exists in SMPN 1 Semarang absis v.2017-10-19 and earlier versions, which stems from a cross-site scripting XSS vulnerability in the nama parameter in the lock/lock.php file...

6.1CVSS5.7AI score0.00892EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/11/27 12:00 a.m.•35 views

CVE-2023-49028

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user parameter in the lock/lock.php file...

6AI score0.00838EPSS
SaveExploits1References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•7 views

Malicious Package

Overview @absis/core-service is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•2 views

Malicious Package

Overview @absis-components/ui-core-elements is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerabl...

9.8CVSS7.1AI score
SaveExploits0References3
Rows per page
Query Builder