Reflected Cross-Site Scripting (XSS)

facturascripts/facturascripts is vulnerable to reflected cross-site scripting XSS attacks. A malicious user is able to inject and execute arbitrary javascript through the codbalance parameter in test function in Balance.php file, which could lead to compromised user accounts/devices...

PT-2017-17611

Name of the Vulnerable Software and Affected Versions Gazelle versions prior to 2017-03-19 Description A Cross-Site Scripting issue was discovered due to insufficient filtration of user-supplied data passed to the "Gazelle-master/sections/tools/finances/bitcoin balance.php" URL. This allows an...

KPPW最新版 6处注入

简要描述： 洞太多啦 详细说明： KPPW 最新版20150327 第一处注入： 漏洞文件:/control/tasklist.php $m = intval$m; $i = intval$i; $s = intval$s; $r = intval$r; $o = intval$o; $pd = intval$pd; $m and $strUrl .="&m=".$m; $s and $strUrl .="&s=".$s; $r and $strUrl .="&r=".$r; $i and $strUrl .="&i=".$i; $pd and $strUrl .="&pd=".$pd;...