SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection through the audit event search ORDER BY handling in JPAAuditEventDAO and Neo4jAuditEventDAO. An administrator with the right entitlements can execute arbitrary SQL by supplying crafted sort parameters in an audit-events...

EUVD-2022-48409

Malicious code in bioql PyPI...

CVE-2022-45543

Cross site scripting XSS vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via the audit search...

CVE-2022-45543

Cross site scripting XSS vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via the audit search...

Cross site scripting

Cross site scripting XSS vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via the audit search...

PT-2023-14699

Name of the Vulnerable Software and Affected Versions DiscuzX version 3.4 Description A cross site scripting XSS issue allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters through the audit search. This enables attackers to inject malicious scripts into...

CVE-2022-45543

The provided connected documents confirm CVE-2022-45543 is an XSS vulnerability in DiscuzX 3.4 that lets an attacker execute arbitrary code via the audit search parameters datetline, title, tpp, or username. The entry indicates a potential arbitrary code execution impact, with no published exploi...

CVE-2022-45543: Improper Neutralization of Input During Web Page Generation

Cross site scripting XSS vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via the audit search...