PT-2024-23636 · Netentsec · Netentsec Ns-Asg

Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue concerns a SQL injection vulnerability. It can be exploited via the "/admin/config ISCGroupSSLCert.php" API endpoint. This could potentially allow for remote attacks. Recommendations: For...

Cogites eReserv Cross-Site Scripting Vulnerability

Cogites eReserv is an online reservation management software from Cogites. A cross-site scripting vulnerability exists in Cogites eReserv version 7.7.58, which stems from a cross-site scripting vulnerability in the /front/admin/config.php file...

PT-2024-16140 · Cogites · Cogites Ereserv

Name of the Vulnerable Software and Affected Versions: Cogites eReserv version 7.7.58 Description: A cross-site scripting issue affects the processing of the file front/admin/config.php. The manipulation of the id argument with a specific input leads to cross-site scripting. This issue can be...

Campcodes Advanced Online Voting System 跨站脚本漏洞

Campcodes Advanced Online Voting System is an online voting system. A cross-site scripting vulnerability exists in Campcodes Advanced Online Voting System v1.0. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the parameter title of the file...

PT-2023-17455 · Unknown · Campcodes Advanced Online Voting System

Name of the Vulnerable Software and Affected Versions: Campcodes Advanced Online Voting System version 1.0 Description: A vulnerability has been found in the system, classified as problematic. It affects unknown code of the file /admin/config save.php. The manipulation of the title argument leads...

Upgraded Q -> M from 270 [1657580410834]

Judge has assessed an item in Issue 270 as Medium risk. The relevant finding follows: 6.L- Admin config ProtocolFee and gasFee missing max amount check which can be used to take fund from user With PROTOCOLFEEBPS 10000 more than 100%, the exchange can steal user WETH who might approve max WETH...

CVE-2021-42946

A Cross Site Scripting XSS vulnerability exists in htmly.2.8.1 via the Copyright field in the /admin/config page...

Cross site scripting

A Cross Site Scripting XSS vulnerability exists in htmly.2.8.1 via the Copyright field in the /admin/config page...

CVE-2021-42946

A Cross Site Scripting XSS vulnerability exists in htmly.2.8.1 via the Copyright field in the /admin/config page...

CVE-2021-42946

A Cross Site Scripting XSS vulnerability exists in htmly.2.8.1 via the Copyright field in the /admin/config page...

CVE-2021-42867

A Cross Site Scripting XSS vulnerability exists in DanPros htmly 2.8.1 via the Description field in 1 admin/config, and 2 index.php pages...

PT-2022-11719

Name of the Vulnerable Software and Affected Versions DanPros htmly version 2.8.1 Description A Cross Site Scripting XSS issue exists via the Description field in the "admin/config" and "index.php" pages. Recommendations For DanPros htmly version 2.8.1, consider restricting access to the...

PT-2022-11748

Name of the Vulnerable Software and Affected Versions htmly version 2.8.1 Description A Cross Site Scripting XSS issue exists via the Copyright field in the "/admin/config" page. Recommendations For version 2.8.1, as a temporary workaround, consider restricting access to the "/admin/config" page...

CVE-2021-42946: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS vulnerability exists in htmly.2.8.1 via the Copyright field in the /admin/config page...

CVE-2021-42867: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS vulnerability exists in DanPros htmly 2.8.1 via the Description field in 1 admin/config, and 2 index.php pages...

HTMLy 跨站脚本漏洞

HTMLy is a PHP-based open source blogging platform. A security vulnerability exists in HTMLy 2.8.1 that could lead to cross-site scripting via the copyright field in the /admin/config page...

CVE-2022-23878

seacms V11.5 is affected by an arbitrary code execution vulnerability in adminconfig.php...

CVE-2020-21506

waimai Super Cms 20150505 contains a cross-site scripting XSS vulnerability in the component /admin.php?m=Config&a=add...

Cross site scripting

The "blog title" field in the "Settings" menu "config" page of "dashboard" in htmly 2.8.1 has a storage cross site scripting XSS vulnerability. It allows remote attackers to send an authenticated post HTTP request to admin/config and inject arbitrary web script or HTML through a special website...

CVE-2021-36703

The "blog title" field in the "Settings" menu "config" page of "dashboard" in htmly 2.8.1 has a storage cross site scripting XSS vulnerability. It allows remote attackers to send an authenticated post HTTP request to admin/config and inject arbitrary web script or HTML through a special website...