Liferay Portal 7.x <= 7.2.1 / 7.3 < 7.3.6 Multiple Vulnerabilities

Liferay Portal 7.x through 7.2.1 and 7.3.x before 7.3.6 is affected by multiple vulnerabilities, as follows: - The Portal Store module in Liferay Portal 7.0.0 through 7.3.5, and Liferay DXP 7.0 before fix pack 97, 7.1 before fix pack 21, 7.2 before fix pack 10 and 7.3 before fix pack 1 does not...

CVE-2020-23179: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in administration/settingsmain.php of PHP-Fusion 9.03.50 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Site footer" field...

Php-fusion PHP-Fusion 跨站脚本漏洞

PHP-Fusion is a lightweight open source content management system. A reflective cross-site scripting vulnerability exists in /administration/theme.php in PHP-Fusion version 9.03.60, which can be exploited to execute arbitrary web script or HTML via the "Manage Theme" field...

helpUS (remote administration tool) has an unspecified vulnerability

HelpU agent is a software from HelpU Korea that uses remote control technology to resolve issues by allowing direct viewing of a customer's computer screen. It makes customer support easier and better. helpUS remote administration tool has a security vulnerability that stems from incorrect...

CVE-2020-7868

A remote code execution vulnerability exists in helpUSremote administration tool due to improper validation of parameter of ShellExecutionExA function used for login...

CVE-2020-7869

An improper input validation vulnerability of ZOOK software remote administration tool could allow a remote attacker to create arbitrary file. The ZOOK viewer has the "Tight file CMD" function to create file. An attacker could create and execute arbitrary file in the ZOOK agent program using "Tig...

CVE-2020-7869

An improper input validation vulnerability of ZOOK software remote administration tool could allow a remote attacker to create arbitrary file. The ZOOK viewer has the "Tight file CMD" function to create file. An attacker could create and execute arbitrary file in the ZOOK agent program using "Tig...

CVE-2020-7868

A remote code execution vulnerability exists in helpUSremote administration tool due to improper validation of parameter of ShellExecutionExA function used for login...

CVE-2020-7869

CVE-2020-7869 affects ZOOK (remote administration tool). The issue is improper input validation in the ZOOK viewer’s Tight File CMD functionality, enabling a remote attacker to create and execute arbitrary files in the ZOOK agent without authority. Documented by multiple sources (NVD, Red Hat, CN...

CVE-2020-7869

An improper input validation vulnerability of ZOOK software remote administration tool could allow a remote attacker to create arbitrary file. The ZOOK viewer has the "Tight file CMD" function to create file. An attacker could create and execute arbitrary file in the ZOOK agent program using "Tig...

CVE-2020-7868

CVE-2020-7868 affects HelpU’s remote administration tool (helpUS). The vulnerability arises from improper validation of parameters in the ShellExecutionExA function during login, enabling remote code execution. Public sources in the connected documents confirm the issue but do not provide exploit...

CVE-2020-7868: Improper Neutralization of Parameter/Argument Delimiters

A remote code execution vulnerability exists in helpUSremote administration tool due to improper validation of parameter of ShellExecutionExA function used for login...

Cross-Site Scripting (XSS)

shopware/shopware is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser via administration...

CVE-2021-32713

Shopware is an open source eCommerce platform. Versions prior to 5.6.10 suffer from an authenticated stored XSS in administration vulnerability. Users are recommend to update to the version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overvi...

Cross site scripting

Shopware is an open source eCommerce platform. Versions prior to 5.6.10 suffer from an authenticated stored XSS in administration vulnerability. Users are recommend to update to the version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overvi...

CVE-2021-32713 Authenticated Stored XSS

Shopware is an open source eCommerce platform. Versions prior to 5.6.10 suffer from an authenticated stored XSS in administration vulnerability. Users are recommend to update to the version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overvi...

PT-2021-19880 · Shopware · Shopware

Name of the Vulnerable Software and Affected Versions: Shopware versions prior to 6.4.1.1 Description: The admin API has exposed some internal hidden fields when an association has been loaded with a to many reference. Users are recommended to update to version 6.4.1.1. The update to 6.4.1.1 can ...

CVE-2021-32713: Improper Neutralization of Input During Web Page Generation

Shopware is an open source eCommerce platform. Versions prior to 5.6.10 suffer from an authenticated stored XSS in administration vulnerability. Users are recommend to update to the version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overvi...

GetSimple CMS Cross-Site Scripting Vulnerability (CNVD-2021-45144)

GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. A cross-site scripting vulnerability exists in admin/snippets.php in GetSimple CMS version 3.4.0a. An attacker can exploit this vulnerability via Add Snippet and Save snippets to conduct cross-site...

Shopware 跨站脚本漏洞

Shopware is an open source e-commerce platform. A cross-site scripting vulnerability exists in Shopware versions prior to 5.6.10. An attacker can exploit this vulnerability to inject malicious script into Administration to execute client-side code...