13317 matches found
CVE-2021-27822
A persistent cross site scripting XSS vulnerability in the Add Categories module of Vehicle Parking Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Category field...
CVE-2021-27822
A persistent cross site scripting XSS vulnerability in the Add Categories module of Vehicle Parking Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Category field...
CVE-2021-27822
A persistent cross site scripting XSS vulnerability in the Add Categories module of Vehicle Parking Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Category field...
Cross site scripting
A persistent cross site scripting XSS vulnerability in the Add Categories module of Vehicle Parking Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Category field...
CVE-2021-27822
CVE-2021-27822 affects Vehicle Parking Management System 1.0, with a persistent XSS in the Add Categories module via the Category field. Root cause cited across connected sources as insufficient validation/escape of client-side data, enabling arbitrary script execution. Impact is described as rem...
CVE-2021-27822
A persistent cross site scripting XSS vulnerability in the Add Categories module of Vehicle Parking Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Category field...
CVE-2021-27822: Improper Neutralization of Input During Web Page Generation
A persistent cross site scripting XSS vulnerability in the Add Categories module of Vehicle Parking Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Category field...
PT-2021-17631 · Unknown · Vehicle Parking Management System
Name of the Vulnerable Software and Affected Versions: Vehicle Parking Management System version 1.0 Description: A persistent cross site scripting XSS issue in the Add Categories module allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Category field...
PT-2022-3327 · Mariadb +7 · Mariadb +8
Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.4 through 10.7 Description: The issue is related to a buffer overflow in the prepare inplace add virtual function of the MariaDB database management system. This could allow a remote attacker to impact the confidentiality,...
CVE-2020-28846: Cross-Site Request Forgery (CSRF)
Cross Site Request Forgery CSRF vulnerability exists in SeaCMS 10.7 in adminmanager.php, which could let a malicious user add an admin account...
CVE-2021-34666
The Add Sidebar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the add parameter in the /wpsidebarMenu.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.0...
CVE-2021-34666
The Add Sidebar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the add parameter in the /wpsidebarMenu.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.0...
CVE-2021-34666 Add Sidebar <= 2.0.0 Reflected Cross-Site Scripting
The Add Sidebar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the add parameter in the /wpsidebarMenu.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.0...
CVE-2021-34666
The CVE-2021-34666 entry concerns the WordPress Add Sidebar plugin, affected in versions up to and including 2.0.0. The vulnerability is a Reflected Cross-Site Scripting (XSS) flaw triggered via the add parameter in the ~/wp_sidebarMenu.php script, enabling an attacker to inject arbitrary scripts...
CVE-2021-34666: Improper Neutralization of Input During Web Page Generation
The Add Sidebar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the add parameter in the /wpsidebarMenu.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.0...
WordPress 插件跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. WordPress Add Sidebar plugin has a security...
WordPress Add Sidebar plugin <= 2.0.0 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress Add Sidebar plugin versions = 2.0.0. Solution This plugin has been closed as of August 12, 2021 and is not available for download. This closure is temporary, pending a full review...
bycms 跨站请求伪造漏洞
bycms is a simple, easy-to-use content management system. bycms v1.3.0 has a cross-site request forgery vulnerability, an attacker can add an administrator account via admin.php/ucenter/add.html...
CVE-2020-18457: Cross-Site Request Forgery (CSRF)
Cross Site Request Forgery CSRF vulnerability exists in bycms v1.3.0 that can add an admin account via admin.php/ucenter/add.html...
CVE-2020-18460: Cross-Site Request Forgery (CSRF)
Cross Site Request Forgery CSRF vulnerability exists in 711cms v1.0.7 that can add an admin account via admin.php?c=Admin&m=content...