580 matches found
CVE-2021-44091
A Cross-Site Scripting XSS vulnerability exists in Courcecodester Multi Restaurant Table Reservation System 1.0 in register.php via the 1 fullname, 2 phone, and 3 address parameters...
SourceCodester Multi Restaurant Table Reservation System 跨站脚本漏洞
SourceCodester Multi Restaurant Table Reservation System is a multi-restaurant table reservation system. A cross-site scripting vulnerability exists in Sourcecodester Multi Restaurant Table Reservation System v1.0. The vulnerability is caused by the fullname, phone, address parameters in the...
Cross-site Scripting (XSS)
elgg/elgg is vulnerable to cross-site scripting XSS attacks. Improper input neutralization during web page generation allows malicious users to inject and execute arbitrary javascript through address parameter in add.php...
CVE-2021-43810
Admidio is a free open source user management system for websites of organizations and groups. A cross-site scripting vulnerability is present in Admidio prior to version 4.0.12. The Reflected XSS vulnerability occurs because redirect.php does not properly validate the value of the url parameter...
Tenda AC9 安全漏洞
Tenda AC9 is a wireless router from Tenda, China. Tenda AC9 is vulnerable to a buffer overflow vulnerability, which can be exploited to execute arbitrary code via the url parameter...
SITA Software Azur CMS 跨站脚本漏洞
SITA Software Azur CMS is a web CMS. A cross-site scripting vulnerability exists in SITA Software Azur CMS 1.2.3.1 and prior versions, which stems from the software's lack of effective validation and filtering of parameters. This allows a remote attacker to pass 1 NOMCLI, 2 ADRESSE, 3 ADRESSE2, 4...
IEC104 缓冲区错误漏洞
IEC104 is an international standard of the International Electrotechnical Commission IEC standards organization widely used in the electric power, urban rail transit, and other industries. A buffer error vulnerability exists in IEC104 version 1.0, which originates from a stacked buffer overflow i...
Wordpress Plugin Broken Link Manager SQL注入漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A SQL injection vulnerability exists in Wordpress Plugin Brok...
whatsns SQL注入漏洞
whatsns is an open source online question and answer system. The system supports cloud storage, image watermark settings, full-text search, on-site behavior monitoring, SMS registration and notification, and other features. A SQL injection vulnerability exists in Whatsns, which originates from th...
PT-2021-10200 · Gnuboard5 · Gnuboard5
Name of the Vulnerable Software and Affected Versions: gnuboard5 versions prior to 5.3.2.8 Description: The issue is related to a Cross Site Scripting XSS vulnerability. It can be exploited via the url parameter to "bbs/login.php" endpoint. Recommendations: For versions prior to 5.3.2.8, update t...
KuaiFan 参数注入漏洞
KuaiFanCMS later referred to as KF using PHP5 + MYSQL as the technical basis for the development of KF using the Smarty template engine to build a site system. KuaiFanCMS V5 has a security vulnerability, the vulnerability stems from KuaiFanCMS V5 in chakanhtml.module.php file HTML url parameter...
Cisco Webex Meetings Open Redirect Vulnerability
Cisco Webex Meetings provides affordable enterprise virtual meeting solutions. An open redirect vulnerability exists in the Web management interface of Cisco Webex Meetings. The vulnerability stems from improper validation of the input of URL parameters in an HTTP request. An attacker could explo...
CVE-2020-35742
HGiga MailSherlock contains a vulnerability of SQL Injection. Attackers can inject and launch SQL commands in a URL parameter...
CVE-2020-29455
A cross-Site Scripting XSS vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to inject arbitrary web script or HTML via any address parameter e.g., street or country...
CVE-2020-29455
A cross-Site Scripting XSS vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to inject arbitrary web script or HTML via any address parameter e.g., street or country...
Cross site scripting
A cross-Site Scripting XSS vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to inject arbitrary web script or HTML via any address parameter e.g., street or country...
CVE-2020-29455
A cross-Site Scripting XSS vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to inject arbitrary web script or HTML via any address parameter e.g., street or country...
SmartyStreets liveAddressPlugin.js Cross Site Scripting Vulnerability
SmartyStreets LiveAddressPlugin is a codebase for adding address validation and autocomplete functionality to web pages based on Javascript support pluggable by SmartyStreets individual developers. A cross-site scripting vulnerability in SmartyStreets liveAddressPlugin.js version 3.2 allows remot...
Seowon SLC 130 Router Authentication Bypasses RCE Vulnerability
Seowon Intech is located in South Korea and is engaged in the manufacture and sale of cellular phones and electronic components. A security vulnerability exists in the Seowon Intech SLC-130 and SLR-120S. An attacker can exploit the vulnerability by sending the 'ipAddr' parameter to the...