CVE-2021-34370

Accela Civic Platform (versions up to 21.1; and affected earlier up to 20.1 in CVE-2021-34370) contains a Cross-Site Scripting vulnerability via ssoAdapter/logoutAction.do?successURL. The issue allows injection of arbitrary JavaScript in the victim’s browser, with potential data theft, session hi...

Accela Civic Platform Cross-Site Scripting Vulnerability

Accela Civic Platform is Accela's application software cloud-based solution to modernize city systems for land management and code enforcement, increased civic engagement and mobile information access. Accela Civic Platform cross-site scripting vulnerability that stems from Accela Platform's lack...

PT-2021-20480 · Accela · Accela Civic Platform

Name of the Vulnerable Software and Affected Versions: Accela Civic Platform versions through 20.1 Description: The issue allows remote attackers to obtain sensitive information via a modified contactSeqNumber value in the portlets/contact/ref/refContactDetail.do endpoint. However, the vendor...

Accela Civic Platform 安全漏洞

Accela Civic Platform is a cloud-based solution for Accela's application software to modernize city systems for land management and code enforcement, increased citizen engagement and mobile information access. information disclosure vulnerabilities exist in versions of Accela Civic Platform prior...

PT-2021-20482 · Accela · Accela Civic Platform

Name of the Vulnerable Software and Affected Versions: Accela Civic Platform versions prior to 20.2 Description: The issue allows for successURL XSS in the ssoAdapter/logoutAction.do endpoint. The vendor has stated that there are configurable security flags and they are unable to reproduce the...

Accela Civic Platform 跨站脚本漏洞

Accela Civic Platform is a cloud-based solution for Accela's applications to modernize city systems for land management and code enforcement, increased citizen engagement and mobile information access. The vulnerability stems from the lack of proper validation of client-side data by the WEB...

CVE-2021-33904

In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS. NOTE: The vendor states "there are configurable security flags and we are unable to reproduce them with the available information...

CVE-2021-33904

In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS. NOTE: The vendor states "there are configurable security flags and we are unable to reproduce them with the available information...

Information disclosure

DISPUTED In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS. NOTE: The vendor states "there are configurable security flags and we are unable to reproduce them with the available information."...

CVE-2021-33904

In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS. NOTE: The vendor states "there are configurable security flags and we are unable to reproduce them with the available information...

CVE-2021-33904

Accela Civic Platform

Accela Civic Platform 跨站脚本漏洞

Accela Civic Platform is Accela's application software cloud-based solution to modernize city systems for land management and code enforcement, increased civic engagement and mobile information access. Accela Civic Platform cross-site scripting vulnerability that stems from Accela Platform's lack...

PT-2021-20359 · Accela · Accela Civic Platform

Name of the Vulnerable Software and Affected Versions: Accela Civic Platform versions prior to 21.2 Description: The issue concerns a security problem where the servProvCode parameter in the "security/hostSignon.do" endpoint is vulnerable to XSS. The vendor has noted that there are configurable...

Accela Civic Platform Citizen Access portal Arbitrary File Upload Vulnerability

The Accela Civic Platform Citizen Access portal is a web portal from Accela, Inc. that connects citizens to government. An arbitrary file upload vulnerability exists in the Accela Civic Platform Citizen Access portal, which can be exploited by an attacker to upload arbitrary files to a web server...

Accela Civic Platform Citizen Access portal cross-site scripting vulnerability

Accela Civic Platform Citizen Access portal is a web portal for citizens and government to connect and interact. Cross-site scripting vulnerabilities exist in the Accela Civic Platform Citizen Access portal. These vulnerabilities can be exploited by an attacker to steal cookie-based authenticatio...

CVE-2016-5661

Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified EventArgument and filename parameters...

CVE-2016-5660

Cross-site scripting XSS vulnerability in AttachmentsList.aspx in Accela Civic Platform Citizen Access portal allows remote attackers to inject arbitrary web script or HTML via the iframeid parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in AttachmentsList.aspx in Accela Civic Platform Citizen Access portal allows remote attackers to inject arbitrary web script or HTML via the iframeid parameter...

Code injection

Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified EventArgument and filename parameters...

CVE-2016-5661

Accela Civic Platform Citizen Access portal is affected by CVE-2016-5661: Arbitrary file upload vulnerability where the portal relies on client-side file-type checks and an attacker can bypass these restrictions by manipulating the _EventArgument and filename parameters to upload arbitrary files....