118 matches found
CVE-2022-31029
AdminLTE is a Pi-hole Dashboard for stats and configuration. In affected versions inserting code like "alert"XSS"" in the field marked with "Domain to look for" and hitting enter or clicking on any of the buttons will execute the script. The user must be logged in to use this vulnerability. Usual...
PT-2022-20473 · Adminlte · Adminlte
Name of the Vulnerable Software and Affected Versions: AdminLTE affected versions not specified Description: The issue allows an attacker to execute scripts by inserting malicious code, such as alert"XSS", into the "Domain to look for" field and then triggering the execution by hitting enter or...
Pi-hole 跨站脚本漏洞
Pi-hole is a web-grade ad-blocking application from Pi-hole, Inc. A cross-site scripting vulnerability exists in Pi-hole Adminlte v 5.12 and earlier versions, which stems from a cross-site scripting vulnerability in scripts/pi-hole/php/queryads.php...
CVE-2022-31029: Improper Neutralization of Input During Web Page Generation
AdminLTE is a Pi-hole Dashboard for stats and configuration. In affected versions inserting code like in the field marked with "Domain to look for" and hitting enter or clicking on any of the buttons will execute the script. The user must be logged in to use this vulnerability. Usually only...
Pi-Hole AdminLTE Remote Code Execution Vulnerability
Pi-hole Web v4.3.2 aka AdminLTE allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease...
Sourcecodester Online Event Booking and Reservation System SQL Injection Vulnerability
Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by three types of users, namely system administrators, students, and instructors. sourcecodester Online Event Booking and...
Sourcecodester Online Event Booking and Reservation System HTML Injection Vulnerability
Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by three types of users, namely system administrators, students and teachers. Sourcecodester Online Event Booking and...
Sourcecodester Online Event Booking and Reservation System Cross-Site Scripting Vulnerability
Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by 3 types of users, namely system administrators, students and faculty. sourcecodester Online Event Booking and Reservation...
Pi-hole Web Interface < 5.8 XSS Vulnerability
The Pi-hole Web Interface previously AdminLTE is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2021-41175
Pi-hole's Web interface based on AdminLTE provides a central location to manage one's Pi-hole and review the statistics generated by FTLDNS. Prior to version 5.8, cross-site scripting is possible when adding a client via the groups-clients management page. This issue was patched in version 5.8...
Cross site scripting
Pi-hole's Web interface based on AdminLTE provides a central location to manage one's Pi-hole and review the statistics generated by FTLDNS. Prior to version 5.8, cross-site scripting is possible when adding a client via the groups-clients management page. This issue was patched in version 5.8...
CVE-2021-41175
Pi-hole Web Interface (AdminLTE) is affected by a Stored XSS vulnerability in the groups-clients management page. The issue exists prior to version 5.8 and can be triggered when adding a client, enabling an attacker with access to the web UI to inject and execute script in an authenticated contex...
CVE-2021-3811
adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3811
adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3812
adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3812
adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Cross site scripting
adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Cross site scripting
adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
