176 matches found
CVE-2021-41810
Script injection in M-Files Admin versions before 22.2.11051.0, allows executing stored script in admin tool. M-Files Admin tool allows storing configuration data with script which may then get run by another vault administrator. Requires vault admin level authentication and is not remotely...
Authentication flaw
Admin tool allows storing configuration data with script which may then get run by another vault administrator. Requires vault admin level authentication and is not remotely exploitable...
CVE-2021-41810
The CVE-2021-41810 issue affects M-Files Server. An administrative tool can store configuration data that may contain a script, which can be executed by another vault administrator. The vulnerability requires vault admin level authentication and is not remotely exploitable per the primary descrip...
CVE-2021-41810 Script injection in M-Files Admin
Script injection in M-Files Admin versions before 22.2.11051.0, allows executing stored script in admin tool. M-Files Admin tool allows storing configuration data with script which may then get run by another vault administrator. Requires vault admin level authentication and is not remotely...
PT-2022-11490
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue concerns an admin tool that allows storing configuration data with a script, which can then be executed by another vault administrator. This...
CVE-2020-22312
A cross-site scripting XSS vulnerability was discovered in the OJ/admin-tool /calscores.php function of HZNUOJ v1.0...
CVE-2020-22312
A cross-site scripting XSS vulnerability was discovered in the OJ/admin-tool /calscores.php function of HZNUOJ v1.0...
Cross site scripting
A cross-site scripting XSS vulnerability was discovered in the OJ/admin-tool /calscores.php function of HZNUOJ v1.0...
CVE-2020-22312
A cross-site scripting XSS vulnerability was discovered in the OJ/admin-tool /calscores.php function of HZNUOJ v1.0...
CVE-2020-22312
CVE-2020-22312 affects HZNUOJ v1.0, with a cross-site scripting (XSS) vulnerability in the OJ/admin-tool/cal_scores.php function. The issue is documented in multiple sources (NVD entry, Red Hat, CVE lists) as an XSS risk, but the connected records do not provide a concrete remediation, patch vers...
CVE-2020-22312
A cross-site scripting XSS vulnerability was discovered in the OJ/admin-tool /calscores.php function of HZNUOJ v1.0...
PT-2021-10756
Name of the Vulnerable Software and Affected Versions HZNUOJ version 1.0 Description A cross-site scripting XSS issue was found in the /cal scores.php function of the OJ/admin-tool. This affects the ability to properly secure user input, potentially leading to malicious script execution...
Hznuoj Cross-Site Scripting Vulnerability
Hznuoj is an open source online referee based on Hustoj by the individual developer Lixin Wei in China. A security vulnerability exists in HZNUOJ, which stems from a cross-site scripting vulnerability found in the OJ admin-tool cal scores.php function in HZNUOJ v1.0...
admin-tool-button (>=1.0.1a0, <=1.0.5a0), apis-ampel (0.1.0) +43 more potentially affected by CVE-2021-32052 via django (3.2.0)
django PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - admin-tool-button =1.0.1a0, =0.2.0, =0.14.0, =0.13.0, =0.8.0, =0.9.16 and more Source cves: CVE-2021-32052 Source advisory: MEND:CVE-2021-32052...
CVE-2021-26549
An XSS issue was discovered in SmartFoxServer 2.17.0. Input passed to the AdminTool console is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML code in a user's browser session in context of an affected site...
CVE-2021-26551
An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code, and bypass the javashell.py protection mechanism, by creating /config/ConsoleModuleUnlock.txt and editing /config/admin/admintool.xml to enable the Console module...
PT-2022-8589 · Moodle +1 · Moodle +1
Name of the Vulnerable Software and Affected Versions: Moodle versions prior to 3.8.2 Moodle versions prior to 3.7.5 Moodle versions prior to 3.6.9 Moodle versions prior to 3.5.11 Description: The issue is related to insufficient input escaping applied to the PHP unit webrunner admin tool...
CVE-2019-10186
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. A sesskey CSRF token was not being utilised by the XML loading/unloading admin tool...