Doctor’s Appointment System Cross-site Scripting Vulnerability

Doctor's Appointment System is a doctor's appointment system by Hashen Udara, an individual developer. A security vulnerability exists in Doctor's Appointment System version 1.0, which stems from its admin panel allowing an attacker to steal a cookie to take over the administrator account...

PT-2022-20213 · Cellinx · Cellinx Camera

Name of the Vulnerable Software and Affected Versions: Cellinx Camera affected versions not specified Description: The issue allows an attacker with web access to elevate privileges from guest to administrative by modifying specific cookie values, including is admin and showConfig, enabling chang...

CVE-2022-30620

On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following cookie values from "isadmin", "showConfig". Administrative Privileges which allows changing various configuration in the camera...

CVE-2022-30017

Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing...

Jenkins plugin: Cross-site scripting vulnerability

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Agent Server Parameter Plugin 1.0 and earlier versions have a cross-site scripting vulnerability that stems from n...

Jenkins plugin cross-site scripting vulnerability

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.A cross-site scripting vulnerability exists in Jenkins Custom Checkbox Parameter Plugin 1.1 and earlier versions, which ste...

CVE-2020-19770

A cross-site scripting XSS vulnerability in the system bulletin component of WUZHI CMS v4.1.0 allows attackers to steal the admin's cookie...

Cross site scripting

A cross-site scripting XSS vulnerability in the system bulletin component of WUZHI CMS v4.1.0 allows attackers to steal the admin's cookie...

CVE-2020-19770

A cross-site scripting XSS vulnerability in the system bulletin component of WUZHI CMS v4.1.0 allows attackers to steal the admin's cookie...

CVE-2020-19770

CVE-2020-19770 is a cross-site scripting (XSS) vulnerability in the system bulletin component of WUZHI CMS v4.1.0. It can allow an attacker to steal an administrator’s cookie. The available connected documents confirm the affected software (WUZHI CMS 4.1.0) and the impact (cookie theft). No concr...

Cross site scripting

Cross Site Scripting XSS vulnerability exits in Anchor CMS =0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations...

CVE-2021-25875

AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the searchPhrase parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator...

Maccms cross-site scripting vulnerabilities

Maccms is a PHP-based content management system CMS for film and television. A cross-site scripting vulnerability exists in Macmms 10, which stems from a failure to properly handle data for the typeen parameter in the product. An attacker could obtain an administrator cookie and escalate privileg...

CVE-2021-40350

webctrl.cgi.elf on Christie Digital DWU850-GS V06.46 devices allows attackers to perform any desired action via a crafted query containing an unspecified Cookie header. Authentication bypass can be achieved by including an administrative cookie that the device does not validate...

CVE-2020-21333

Cross Site Scripting XSS vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case...

CVE-2020-21333

Cross Site Scripting XSS vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case...

Cross site scripting

Cross Site Scripting XSS vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case...

CVE-2020-21333

Cross Site Scripting XSS vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case...

CVE-2020-21333

Cross Site Scripting XSS vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case...

PT-2021-10611

Name of the Vulnerable Software and Affected Versions: PublicCMS versions 4.0 Description: The issue is related to a Cross Site Scripting XSS vulnerability. This vulnerability can be exploited to obtain an admin cookie when the Administrator reviews a submitted case. Recommendations: For PublicCM...