Lucene search
+L

7 matches found

Positive Technologies
Positive Technologies
•added 2025/01/12 12:00 a.m.•27 views

PT-2025-3868 · Unknown · Reckon Sppanadmin

Name of the Vulnerable Software and Affected Versions: reckcn SPPanAdmin version 1.0 Description: A cross-site scripting issue was found in the software, allowing for remote exploitation. The manipulation of the name argument in the "/;/admin/role/edit" file leads to this issue. Other parameters...

5.3CVSS4.3AI score0.00422EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/12 12:00 a.m.•5 views

CVE-2025-0397: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in reckcn SPPanAdmin 1.0. Affected is an unknown function of the file /;/admin/role/edit. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclos...

5.3CVSS3.5AI score0.00422EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/09/26 12:00 a.m.•16 views

springboot_authority cross-site scripting vulnerability

springbootauthority is a backend management system. The system includes modules for user management, role management, and resource connection management. A cross-site scripting vulnerability exists in the admin/role/edit page in springbootauthority 2017-03-06 and earlier versions, which can be...

4.8CVSS4.9AI score0.00534EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2018/09/23 10:29 p.m.•15 views

CVE-2018-17369

An issue was discovered in springbootauthority through 2017-03-06. There is stored XSS via the admin/role/edit roleKey, name, or description parameter...

4.8CVSS5.8AI score0.00534EPSS
SaveExploits1References1
Prion
Prion
•added 2018/09/23 10:29 p.m.•27 views

Cross site scripting

An issue was discovered in springbootauthority through 2017-03-06. There is stored XSS via the admin/role/edit roleKey, name, or description parameter...

3.5CVSS4.8AI score0.00534EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/23 12:00 a.m.•8 views

CVE-2018-17369: Improper Neutralization of Input During Web Page Generation

An issue was discovered in springbootauthority through 2017-03-06. There is stored XSS via the admin/role/edit roleKey, name, or description parameter...

4.8CVSS5.6AI score0.00534EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/09/23 12:00 a.m.•6 views

PT-2018-13997

Name of the Vulnerable Software and Affected Versions springboot authority versions prior to 2017-03-06 Description An issue was discovered that allows stored XSS via the admin/role/edit endpoint, specifically through the roleKey, name, or description parameters. Recommendations For versions prio...

4.8CVSS0.00534EPSS
SaveExploits1References3
Rows per page
Query Builder