5036 matches found
CVE-2022-36203
Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting XSS via the admin panel. In addition, it leads to takeover the administrator account by stealing the cookie via XSS...
Cross site scripting
Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting XSS via the admin panel. In addition, it leads to takeover the administrator account by stealing the cookie via XSS...
CVE-2022-36203
CVE-2022-36203 involves Doctor’s Appointment System version 1.0 and describes a Cross-Site Scripting (XSS) vulnerability in the admin panel that can result in taking over the administrator account by stealing the cookie. The vulnerability is documented with a CVSS v3.1 base score of 6.1 (Medium) ...
Subrion CMS 4.2.1 vulnerable to cross-site scripting in admin panel
Cross Site Scripting XSS in the Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via the Login Field...
GHSA-RH4R-9689-6XW4 Subrion CMS 4.2.1 vulnerable to cross-site scripting in admin panel
Cross Site Scripting XSS in the Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via the Login Field...
CVE-2022-37059
Cross Site Scripting XSS in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field...
CVE-2022-37059
Cross Site Scripting XSS in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field...
Cross site scripting
Cross Site Scripting XSS in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field...
CVE-2022-37059
Cross Site Scripting XSS in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field...
CVE-2022-37059
CVE-2022-37059 is an XSS vulnerability in the Admin Panel of Subrion CMS 4.2.1, allowing an attacker to inject arbitrary code through the Login Field. The issue is consistently described across Red Hat, CVE listings, and security advisories as a cross-site scripting flaw in Subrion CMS 4.2.1 with...
CVE-2022-37059
Cross Site Scripting XSS in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field...
PT-2022-23774 · Unknown · Subrion Cms
Name of the Vulnerable Software and Affected Versions: Subrion CMS version 4.2.1 Description: The issue allows an attacker to inject arbitrary code via the Login Field in the Admin Panel, potentially leading to Cross Site Scripting XSS attacks. No information is provided about the estimated numbe...
CVE-2022-36721
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Textbook parameter at /admin/modify.php...
CVE-2021-30071
A cross-site scripting XSS vulnerability in /admin/listkey.html of HestiaCP before v1.3.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
Chinese Hackers Using New Manjusaka Hacking Framework Similar to Cobalt Strike
Researchers have disclosed a new offensive framework referred to as Manjusaka that they call is a "Chinese sibling of Sliver and Cobalt Strike." "A fully functional version of the command-and-control C2, written in Golang with a User Interface in Simplified Chinese, is freely available and can...
Exploit for Cross-site Scripting in Phpgurukul Zoo_Management_System
CVE-2022-33075 Exploit Title: Zoo Management System 1.0 -...
Insecure Direct Object Reference
idno/known is vulnerable to Insecure Direct Object Reference. The vulnerable getContent and postContent functions in Homepage class in Homepage.php file allow remote authenticated attackers to gain access to certain settings of the admin panel due to the use of createGatekeeper inner function...
CVE-2022-31854
Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel...