6 matches found
GHSA-5M69-3CHG-6F8M Cross Site Scripting (XSS) in Quokka
Cross Site Scripting XSS in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'...
Cross Site Scripting (XSS) in Quokka
Cross Site Scripting XSS in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'...
Cross site scripting
Cross Site Scripting XSS in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'...
CVE-2020-18702
Cross Site Scripting XSS in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the multisite component in CheckMK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors to the 1 renderstatusicons function in htmllib.py or 2 ajaxaction functio...
CVE-2009-2737
The CVE-2009-2737 issue affects Roundup. In Roundup 1.2 before 1.2.1 and 1.4 through 1.4.6, the EditCSVAction function in cgi/actions.py does not properly enforce permissions. This allows remote authenticated users with edit or create privileges for a class to modify arbitrary items within that c...