Online school system suffers from xss vulnerability (CNVD-2019-12776)

Online School System is an online education platform developed by Beijing IncuTime Technology Co. An xss vulnerability exists in the I want to ask a question section of the system, which can be exploited by attackers to inject arbitrary Web script or HTML...

WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2019-07935)

WUZHI CMS is five fingers WUZHI company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in WUZHI CMS version 4.1.0. An attacker can use the 'Detailed Description' field in the 'I want to ask a question' page to inject arbitrary Web...

IndiaNIC FAQs Manager 1.0 - Ask Question Form question Parameter XSS

The faqs-manager WordPress plugin was affected by an Ask Question Form question Parameter XSS security vulnerability...

WordPress IndiaNIC FAQs Manager Plugin 1.0 - Multiple Vulnerabilities

No description provided by source. html !-- Exploit Title: WordPress IndiaNIC FAQ 1.0 Plugin CSRF + XSS Google Dork: inurl:wp-content/plugins/faqs-manager Date: 21.03.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage:...

WordPress Plugin IndiaNIC FAQs Manager 1.0 - Multiple Vulnerabilities

alert1 in question parameter. The Captcha value can be read from captcha parameter hidden field Part of Ask Question form =================== We don't need the captcha Image when we have this xD Request from Ask Question area XSS in question parameter POST /wordpress/wp-admin/admin-ajax.php HTTP...

WordPress Plugin IndiaNIC FAQs Manager 1.0 - Multiple Vulnerabilities

WordPress Plugin IndiaNIC FAQs Manager 1.0 - Multiple Vulnerabilities alert1 in question parameter. The Captcha value can be read from captcha parameter hidden field Part of Ask Question form =================== We don't need the captcha Image when we have this xD Request from Ask Question area X...

WordPress IndiaNIC FAQs Manager Plugin 1.0 - Multiple Vulnerabilities

IndiaNIC FAQ Settings Page is vulnerable for CSRF. The Ask Question area front-end is vulnerable for XSS. It is possible to insert alert1 in question parameter. The Captcha value can be read from captcha parameter hidden field =================== We don't need the captcha Image when we have this ...