CVE-2023-40750

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Yacht Listing Script v1.0...

PT-2023-27616 · Phpjabbers · Phpjabbers Fundraising Script

Name of the Vulnerable Software and Affected Versions: PHPJabbers Fundraising Script version 1.0 Description: The issue is related to Cross Site Scripting XSS via the action parameter of "index.php". This allows for potential malicious script execution. The estimated number of potentially affecte...

PT-2023-27617 · Phpjabbers · Phpjabbers Make An Offer Widget

Name of the Vulnerable Software and Affected Versions: PHPJabbers Make an Offer Widget version 1.0 Description: There is a Cross Site Scripting XSS issue in the action parameter of the "index.php" file. This allows for potential malicious script execution. Recommendations: For PHPJabbers Make an...

Phpjabbers Fundraising Script 跨站脚本漏洞

Phpjabbers Fundraising Script is a simple open source Php donation script from Phpjabbers Serbia. It is used for charity fundraising. A security vulnerability exists in PHPJabbers Fundraising Script v1.0, which originates from a cross-site scripting vulnerability in the "action" parameter of the...

Yacht Listing Script 跨站脚本漏洞

Yacht Listing Script is yacht and boat categorization software. A security vulnerability exists in PHPJabbers Yacht Listing Script v1.0, which is caused by a cross-site scripting vulnerability in the "action" parameter of the index.php file...

CVE-2023-36315

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Callback Widget v1.0...

CVE-2023-36315

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Callback Widget v1.0...

CVE-2023-36309

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Document Creator v1.0...

CVE-2023-36309

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Document Creator v1.0...

PT-2023-25524 · Phpjabbers · Phpjabbers Document Creator

Name of the Vulnerable Software and Affected Versions: PHPJabbers Document Creator version 1.0 Description: There is a Cross Site Scripting XSS issue in the action parameter of "index.php" in PHPJabbers Document Creator. This allows for potential malicious script execution. Recommendations: For...

PT-2023-25531 · Phpjabbers · Phpjabbers Callback Widget

Name of the Vulnerable Software and Affected Versions: PHPJabbers Callback Widget version 1.0 Description: There is a Cross Site Scripting XSS issue in the action parameter of the "index.php" file. This allows for potential malicious script execution. Recommendations: For PHPJabbers Callback Widg...

CVE-2023-3562

A vulnerability has been found in GZ Scripts PHP CRM Platform 1.8 and classified as problematic. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument action leads to cross site scripting. The attack can be initiated remotely. The identifier of this...

GZScripts 跨站脚本漏洞

GZScripts is a script from GZScripts, Inc. A cross-site scripting vulnerability exists in GZ Scripts PHP CRM Platform version 1.8, which stems from incorrect manipulation of the parameter action leading to cross-site scripting...

PT-2023-25232 · Unknown · Gz Scripts Php Crm Platform

Name of the Vulnerable Software and Affected Versions: GZ Scripts PHP CRM Platform version 1.8 Description: A vulnerability has been found in the GZ Scripts PHP CRM Platform, classified as problematic. This issue affects unknown code of the file /index.php. The manipulation of the action argument...

PT-2023-5333 · Unknown · Openupload

Name of the Vulnerable Software and Affected Versions: Openupload Stable version 0.4.3 Description: The issue is related to a File Upload vulnerability that allows a remote attacker to execute arbitrary code via the action parameter of the "compress-inc.php" file. This vulnerability is associated...

SUSE CVE-2004-1061

Cross-site scripting XSS vulnerability in Bugzilla before 2.18, including 2.16.x before 2.16.11, allows remote attackers to inject arbitrary HTML and web script via forced error messages, as demonstrated using the action parameter...

SUSE CVE-2005-3894

Multiple cross-site scripting XSS vulnerabilities in index.pl in Open Ticket Request System OTRS 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3 allow remote authenticated users to inject arbitrary web script or HTML via 1 hex-encoded values in the QueueID parameter and 2 Action parameters...

SUSE CVE-2008-0783

Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote attackers to inject arbitrary web script or HTML via 1 the viewtype parameter to graph.php; 2 the filter parameter to graphview.php; 3 the action parameter to the drawnavigationtext...

SUSE CVE-2017-6973

A cross-site scripting XSS vulnerability in the MantisBT Configuration Report page admconfigreport.php allows remote attackers to inject arbitrary code through a crafted 'action' parameter. This is fixed in 1.3.8, 2.1.2, and 2.2.2...

PT-2023-16485 · WordPress · Interactive Geo Maps

Name of the Vulnerable Software and Affected Versions: Interactive Geo Maps plugin for WordPress versions up to, and including, 1.5.9 Description: The issue is related to Stored Cross-Site Scripting via the action content parameter due to insufficient input sanitization and output escaping on...