23 matches found
Aryanic HighMail (High CMS) - Cross-Site Scripting
A cross-site scripting vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm. id: CVE-2020-23517 info: name: Aryanic HighMail High CMS - Cross-Site Scripting author: geeknik severity: medium...
Aryanic HighMail (High CMS) - Cross-Site Scripting Detection
A cross-site scripting vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerability in Aryanic HighMail High CMS versio...
CVE-2020-23517
Cross Site Scripting XSS vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm...
EUVD-2018-9704
Malware in sbrugna...
CVE-2020-23517
Cross Site Scripting XSS vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm...
CVE-2020-23517
Cross Site Scripting XSS vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm...
CVE-2020-23517
Cross Site Scripting XSS vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm...
EUVD-2020-16261
Cross Site Scripting XSS vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm...
CVE-2020-23517
Aryanic HighMail (High CMS) is affected by CVE-2020-23517, a cross-site scripting (XSS) vulnerability in versions 2020 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the 'user' parameter on the LoginForm. In published details, exploitation could enable a...
CVE-2020-23517: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm...
PT-2021-10903
Name of the Vulnerable Software and Affected Versions Aryanic HighMail High CMS versions 2020 and before Description The issue allows remote attackers to inject arbitrary web script or HTML via the user variable to the LoginForm, enabling Cross Site Scripting XSS attacks. Recommendations For...
Aryanic HighMail cross-site scripting vulnerability
Arianik Aryanic HighMail is an application from Arianik Iran. It is used to send and receive e-mail. A security vulnerability exists in Aryanic HighMail versions 2020, which allows remote attackers to inject arbitrary web script or HTML via the "user" to login to the inform...
Aryanic HighPortal Cross-Site Scripting Vulnerability
Aryanic HighPortal is an enterprise portal system based on Java and ASP.NET. A cross-site scripting vulnerability exists in Aryanic HighPortal version 12.5. A remote attacker can exploit this vulnerability by adding tags to inject arbitrary web script or HTML...
CVE-2018-17964
Aryanic HighPortal 12.5 has XSS via an Add Tags action...
CVE-2018-17964
Aryanic HighPortal 12.5 has XSS via an Add Tags action...
Deserialization of untrusted data
Aryanic HighPortal 12.5 has XSS via an Add Tags action...
CVE-2018-17964
Aryanic HighPortal 12.5 has XSS via an Add Tags action...
CVE-2018-17964
CVE-2018-17964 affects Aryanic HighPortal 12.5. The vulnerability is a Cross‑Site Scripting (XSS) flaw that can be triggered via the Add Tags action, enabling injection of arbitrary script/HTML. Public sources in CNVD/NVD describe HighPortal 12.5 as vulnerable to XSS, with the remote attacker abl...
PT-2018-14301
Name of the Vulnerable Software and Affected Versions Aryanic HighPortal version 12.5 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs via an Add Tags action, allowing potential exploitation. Recommendations For version 12.5, consider disabling the Add Tags action...