11971 matches found
CVE-2021-32160
A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the Add Users feature...
CVE-2021-32160
A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the Add Users feature...
Cross site scripting
A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the Add Users feature...
CVE-2021-32160
Webmin 1.973 (Add Users feature) has a cross-site scripting (XSS) vulnerability. The issue arises from insufficient filtering/escaping of user-supplied input in the Add Users flow, allowing injected JavaScript to be executed in the client browser. Affected product: Webmin 1.973 (per CVE-2021-3216...
CVE-2021-32160
A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the Add Users feature...
Webmin 跨站脚本漏洞
Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community.A cross-site scripting vulnerability exists in Webmin version 1.973, which stems from the lack of filtering and escaping of user-submitted parameters for the Add User feature. An...
PT-2022-18237 · Zbzcms · Zbzcms
Name of the Vulnerable Software and Affected Versions: zbzcms version 1.0 Description: The issue is related to incorrect access control at the /admin/run ajax.php endpoint, allowing attackers to add administrator accounts arbitrarily. Recommendations: For zbzcms version 1.0, as a temporary...
CVE-2022-27348
Social Codia SMS v1 was discovered to contain a stored cross-site scripting XSS vulnerability via addpost.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field...
CVE-2022-26624
Bootstrap v3.1.11 and v3.3.7 was discovered to contain a cross-site scripting XSS vulnerability via the Title parameter in /vendor/views/addproduct.php...
Cross site scripting
Bootstrap v3.1.11 and v3.3.7 was discovered to contain a cross-site scripting XSS vulnerability via the Title parameter in /vendor/views/addproduct.php...
Social Codia SMS 1 Cross Site Scripting
sms-AddStudent-StoredXSS-POC Author: D4rkP0w4r Description = StoredXSS at Add Student Step to Reproduct Login to admin - Students - Add Student - input payload at Enter Name Exploit Input payload at Enter Name - clicked Add Students - access All Student - The XSS will trigger Log out admin and...
firefox security update
91.8.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build 91.8.0-1 - Update to 91.8.0...
Bootstrap 跨站脚本漏洞
Bootstrap is a web front-end framework developed using HTML, CSS, and JavaScript. Bootstrap versions v3.1.11 and v3.3.7 are vulnerable to a cross-site scripting vulnerability that originates in the Title parameter in /vendor/views/addproduct.php. An attacker could exploit this vulnerability to...
Social Codia SMS 1 Cross Site Scripting Vulnerability
sms-AddStudent-StoredXSS-POC Author: D4rkP0w4r Description = StoredXSS at Add Student Step to Reproduct Login to admin - Students - Add Student - input payload at Enter Name Exploit Input payload at Enter Name - clicked Add Students - access All Student - The XSS will trigger Log out admin and...
CVE-2021-43432
A Cross Site Scripting XSS vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp...
CVE-2021-43432
A Cross Site Scripting XSS vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp...
PT-2022-11836 · Unknown · Exrick Xmall Admin Panel
Name of the Vulnerable Software and Affected Versions: Exrick XMall Admin Panel affected versions not specified Description: A Cross Site Scripting XSS issue exists in the Exrick XMall Admin Panel, specifically via the GET parameter in the product-add.jsp page. This allows for potential malicious...
Exrick XMall 跨站脚本漏洞
Exrick XMall is a distributed e-commerce shopping mall based on SOA architecture. A security vulnerability exists in the Exrick XMall Admin Panel, which originates from a GET parameter in product-add.jsp...
PT-2022-13747 · Sap · Sap Information System
Name of the Vulnerable Software and Affected Versions: SAP Information System version 1.0 Description: A critical issue was found, allowing an unauthenticated attacker to create a new admin account for the web application with a simple POST request to the "add admin.php" file, located at the "/SA...