CVE-2023-50609

Cross Site Scripting XSS vulnerability in AVA teaching video application service platform version 3.1, allows remote attackers to execute arbitrary code via a crafted script to ajax.aspx...

CVE-2023-50609

Cross Site Scripting XSS vulnerability in AVA teaching video application service platform version 3.1, allows remote attackers to execute arbitrary code via a crafted script to ajax.aspx...

CVE-2023-50609

Cross Site Scripting XSS vulnerability in AVA teaching video application service platform version 3.1, allows remote attackers to execute arbitrary code via a crafted script to ajax.aspx...

Cross site scripting

Cross Site Scripting XSS vulnerability in AVA teaching video application service platform version 3.1, allows remote attackers to execute arbitrary code via a crafted script to ajax.aspx...

AVA teaching video application service platform Cross-site scripting vulnerability

AVA Teaching Video Application Service Platform is a teaching video application service platform from China Aovia AVA. A cross-site scripting vulnerability exists in AVA teaching video application service platform version 3.1, which can be exploited by remote attackers to execute arbitrary code v...

CVE-2023-50609

Cross Site Scripting XSS vulnerability in AVA teaching video application service platform version 3.1, allows remote attackers to execute arbitrary code via a crafted script to ajax.aspx...

CVE-2023-50609

Cross Site Scripting XSS vulnerability in AVA teaching video application service platform version 3.1, allows remote attackers to execute arbitrary code via a crafted script to ajax.aspx...

CVE-2023-50609: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in AVA teaching video application service platform version 3.1, allows remote attackers to execute arbitrary code via a crafted script to ajax.aspx...

CVE-2023-50609

CVE-2023-50609 describes a Cross-Site Scripting (XSS) vulnerability in AVA teaching video application service platform version 3.1. The issue is triggered via a crafted script to ajax.aspx, allowing an attacker to execute code in the context of a vulnerable user session. The NVD/CVE metrics indic...

PT-2024-13946

Name of the Vulnerable Software and Affected Versions AVA teaching video application service platform version 3.1 Description The issue allows remote attackers to execute arbitrary code via a crafted script to the "ajax.aspx" endpoint. This is a Cross Site Scripting XSS vulnerability, which enabl...