Cross site scripting

A cross-site scripting XSS vulnerability was discovered in the OJ/admin-tool /calscores.php function of HZNUOJ v1.0...

CVE-2020-22312

CVE-2020-22312 affects HZNUOJ v1.0, with a cross-site scripting (XSS) vulnerability in the OJ/admin-tool/cal_scores.php function. The issue is documented in multiple sources (NVD entry, Red Hat, CVE lists) as an XSS risk, but the connected records do not provide a concrete remediation, patch vers...

CVE-2020-22312

A cross-site scripting XSS vulnerability was discovered in the OJ/admin-tool /calscores.php function of HZNUOJ v1.0...

Hznuoj 跨站脚本漏洞

Hznuoj is an open source online referee based on Hustoj by the individual developer Lixin Wei in China. A security vulnerability exists in HZNUOJ, which stems from a cross-site scripting vulnerability found in the OJ admin-tool cal scores.php function in HZNUOJ v1.0...

CVE-2021-26549

An XSS issue was discovered in SmartFoxServer 2.17.0. Input passed to the AdminTool console is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML code in a user's browser session in context of an affected site...

CVE-2021-26551

An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code, and bypass the javashell.py protection mechanism, by creating /config/ConsoleModuleUnlock.txt and editing /config/admin/admintool.xml to enable the Console module...

PT-2022-8589 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle versions prior to 3.8.2 Moodle versions prior to 3.7.5 Moodle versions prior to 3.6.9 Moodle versions prior to 3.5.11 Description: The issue is related to insufficient input escaping applied to the PHP unit webrunner admin tool...

CVE-2019-10186

A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. A sesskey CSRF token was not being utilised by the XML loading/unloading admin tool...

UBUNTU-CVE-2019-10186

A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. A sesskey CSRF token was not being utilised by the XML loading/unloading admin tool...

CVE-2019-10186

Moodle CVE-2019-10186 affects Moodle installations prior to 3.7.1, 3.6.5, and 3.5.7. The root cause is that a sesskey CSRF token was not utilized by the XML loading/unloading admin tool, enabling CSRF-related risk. Impact is described as partial confidentiality, integrity, and availability concer...

CVE-2019-10186: Cross-Site Request Forgery (CSRF)

A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. A sesskey CSRF token was not being utilised by the XML loading/unloading admin tool...

Apache Ranger allows remote authenticated administrators to inject arbitrary web script or HTML

Cross-site scripting XSS vulnerability in the create user functionality in the policy admin tool in Apache Ranger before 0.6.1 allows remote authenticated administrators to inject arbitrary web script or HTML via vectors related to policies...

GHSA-RF7Q-XQM3-6923 Apache Ranger allows remote authenticated administrators to inject arbitrary web script or HTML

Cross-site scripting XSS vulnerability in the create user functionality in the policy admin tool in Apache Ranger before 0.6.1 allows remote authenticated administrators to inject arbitrary web script or HTML via vectors related to policies...

Security Bulletin: Security vulnerabilities in IBM Java Runtime affect IBM RLKS Administration and Reporting Tool Admin

Summary There are multiple vulnerabilities related to IBM® Runtime Environment Java™ Technology Edition which is used and shipped by different versions of IBM Rational License Key Server Administration and Reporting Tool Admin ART. Vulnerability Details CVEID: CVE-2017-10281 DESCRIPTION: An...

CVE-2018-6881: Exposure of Sensitive Information to an Unauthorized Actor

EmpireCMS 6.6 allows remote attackers to discover the full path via an array value for a parameter to admin/tool/ShowPic.php...

[SECURITY] Fedora 27 Update: phpMyAdmin-4.7.7-1.fc27

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

IBM Open Admin Tool SOAP welcomeServer PHP Command Injection

Added: 09/27/2017 CVE: CVE-2017-1092 BID: 98615 Background IBM Informix Dynamic Server IDS is an online transaction processing OLTP data server for enterprise and workgroup computing. Open Admin Tool OAT is an open source, platform-independent tool providing a graphical interface for administrati...

IBM Open Admin Tool SOAP welcomeServer PHP Command Injection

Added: 09/27/2017 CVE: CVE-2017-1092 BID: 98615 Background IBM Informix Dynamic Server IDS is an online transaction processing OLTP data server for enterprise and workgroup computing. Open Admin Tool OAT is an open source, platform-independent tool providing a graphical interface for administrati...

IBM Open Admin Tool SOAP welcomeServer PHP Command Injection

Added: 09/27/2017 CVE: CVE-2017-1092 BID: 98615 Background IBM Informix Dynamic Server IDS is an online transaction processing OLTP data server for enterprise and workgroup computing. Open Admin Tool OAT is an open source, platform-independent tool providing a graphical interface for administrati...

IBM Informix Dynamic Server Open Admin Tool Remote Code Execution Vulnerability

IBM Informix Dynamic Server IDS is a scalable object-relational database server from IBM in the United States that provides continuous data availability and disaster recovery, among other features, for clustered data centers.Open Admin Tool is one of the Web applications used to manage and analyz...