10 matches found
COVID19 Testing Management System Take Action Component Cross-Site Scripting Vulnerability
COVID19 Testing Management System is a new crown pneumonia testing management system. COVID19 Testing Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter mark in the file...
CVE-2025-6287
A vulnerability classified as problematic was found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /test-details.php of the component Take Action. The manipulation of the argument remark leads to cross site scripting. Th...
PHPGurukul COVID19 Testing Management System 安全漏洞
COVID19 Testing Management System is a new crown pneumonia testing management system. COVID19 Testing Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter mark in the file...
CVE-2024-50966
dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/doAdminAction.php?act=addAdmin...
Malicious code in action-component (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6377 Malicious code in action-component (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
CVE-2020-23331
An issue was discovered in Bento4 version 06c39d9. A NULL pointer dereference exists in the AP4DescriptorListWriter::Action component located in /Core/Ap4Descriptor.h. It allows an attacker to cause a denial of service DOS...
UBUNTU-CVE-2020-23331
An issue was discovered in Bento4 version 06c39d9. A NULL pointer dereference exists in the AP4DescriptorListWriter::Action component located in /Core/Ap4Descriptor.h. It allows an attacker to cause a denial of service DOS...
CVE-2021-32092
A Cross-site scripting XSS vulnerability in the DocumentAction component of U.S. National Security Agency NSA Emissary 5.9.0 allows remote attackers to inject arbitrary web script or HTML via the uuid parameter...
Malicious Package
Overview action-component is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...