CVE-2022-31050 Insufficient Session Expiration in TYPO3 Admin Tool

TYPO3 is an open source web content management system. Prior to versions 9.5.34 ELTS, 10.4.29, and 11.5.11, Admin Tool sessions initiated via the TYPO3 backend user interface had not been revoked even if the corresponding user account was degraded to lower permissions or disabled completely. This...

CVE-2022-31050 Insufficient Session Expiration in TYPO3 Admin Tool

TYPO3 is an open source web content management system. Prior to versions 9.5.34 ELTS, 10.4.29, and 11.5.11, Admin Tool sessions initiated via the TYPO3 backend user interface had not been revoked even if the corresponding user account was degraded to lower permissions or disabled completely. This...

TYPO3-CORE-SA-2022-005: Insufficient Session Expiration in Admin Tool

More info at https://typo3.org/security/advisory/typo3-core-sa-2022-005...

TYPO3-CORE-SA-2022-005: Insufficient Session Expiration in Admin Tool

More info at https://typo3.org/security/advisory/typo3-core-sa-2022-005...

GHSA-WV9C-PFPM-4WC5 Moodle CSRF Vulnerability

A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. A sesskey CSRF token was not being utilised by the XML loading/unloading admin tool...

GHSA-83M2-9G78-RRJ4 Apache Ranger Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in the Policy Admin Tool in Apache Ranger before 0.5.0 allows remote attackers to inject arbitrary web script or HTML via the HTTP User-Agent header...

Apache Ranger Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in the Policy Admin Tool in Apache Ranger before 0.5.0 allows remote attackers to inject arbitrary web script or HTML via the HTTP User-Agent header...

Apache Ranger allows users to bypass intended access restrictions via direct access to module URLs

The Policy Admin Tool in Apache Ranger before 0.5.0 allows remote authenticated users to bypass intended access restrictions via direct access to module URLs...

Apache Ranger allows users to bypass intended access restrictions via the REST API

The Policy Admin Tool in Apache Ranger before 0.5.1 allows remote authenticated users to bypass intended access restrictions via the REST API...

CVE-2021-41810

Script injection in M-Files Admin versions before 22.2.11051.0, allows executing stored script in admin tool. M-Files Admin tool allows storing configuration data with script which may then get run by another vault administrator. Requires vault admin level authentication and is not remotely...

Authentication flaw

Admin tool allows storing configuration data with script which may then get run by another vault administrator. Requires vault admin level authentication and is not remotely exploitable...

CVE-2021-41810 Script injection in M-Files Admin

Script injection in M-Files Admin versions before 22.2.11051.0, allows executing stored script in admin tool. M-Files Admin tool allows storing configuration data with script which may then get run by another vault administrator. Requires vault admin level authentication and is not remotely...

CVE-2021-41810

The CVE-2021-41810 issue affects M-Files Server. An administrative tool can store configuration data that may contain a script, which can be executed by another vault administrator. The vulnerability requires vault admin level authentication and is not remotely exploitable per the primary descrip...

CVE-2020-22312

A cross-site scripting XSS vulnerability was discovered in the OJ/admin-tool /calscores.php function of HZNUOJ v1.0...

CVE-2020-22312

A cross-site scripting XSS vulnerability was discovered in the OJ/admin-tool /calscores.php function of HZNUOJ v1.0...

Cross site scripting

A cross-site scripting XSS vulnerability was discovered in the OJ/admin-tool /calscores.php function of HZNUOJ v1.0...

CVE-2020-22312

CVE-2020-22312 affects HZNUOJ v1.0, with a cross-site scripting (XSS) vulnerability in the OJ/admin-tool/cal_scores.php function. The issue is documented in multiple sources (NVD entry, Red Hat, CVE lists) as an XSS risk, but the connected records do not provide a concrete remediation, patch vers...

CVE-2020-22312

A cross-site scripting XSS vulnerability was discovered in the OJ/admin-tool /calscores.php function of HZNUOJ v1.0...

Hznuoj 跨站脚本漏洞

Hznuoj is an open source online referee based on Hustoj by the individual developer Lixin Wei in China. A security vulnerability exists in HZNUOJ, which stems from a cross-site scripting vulnerability found in the OJ admin-tool cal scores.php function in HZNUOJ v1.0...

CVE-2021-26549

An XSS issue was discovered in SmartFoxServer 2.17.0. Input passed to the AdminTool console is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML code in a user's browser session in context of an affected site...