11 matches found
EUVD-2021-33123
Malicious code in bioql PyPI...
CVE-2021-46447
A cross-site scripting XSS vulnerability in H.H.G Multistore v5.1.0 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the State parameter under the Address Book module...
CVE-2021-46447
A cross-site scripting XSS vulnerability in H.H.G Multistore v5.1.0 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the State parameter under the Address Book module...
CVE-2021-46447
A cross-site scripting XSS vulnerability in H.H.G Multistore v5.1.0 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the State parameter under the Address Book module...
H.H.G. Multistore 跨站脚本漏洞
H.H.G. Multistore is a software designed to manage multiple stores from H.H.G. Multistore, Germany. A security vulnerability exists in H.H.G. Multistore v5.1.0 and below that allows an attacker to execute arbitrary web script or HTML via a specially crafted payload inserted into the State paramet...
Code injection
The printer friendly version functionality in the Book module in Drupal 6.x before 6.28 and 7.x before 7.19 does not properly restrict access to node that are part of a book outline, which allows remote authenticated users with the "access printer-friendly version" permission to read node titles...
CVE-2013-0245
CVE-2013-0245 affects Drupal 6.x prior to 6.28 and 7.x prior to 7.19, where the printer-friendly version feature in the Book module does not properly restrict access to nodes in a book outline. Remote authenticated users with the “access printer-friendly version” permission can read node titles a...
CVE-2013-0245
Removed by vendor...
Drupal 6.x < 6.28 / 7.x < 7.19 Multiple Vulnerabilities
The remote web server is running a version of Drupal that is 6.x prior to 6.28 or 7.x prior to 7.19. It is, therefore, potentially affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exists due to properly sanitized user-supplied input to certain Drupal JavaScript...
drupal -- multiple vulnerabilities
Drupal Security Team reports: Cross-site scripting Various core and contributed modules Access bypass Book module printer friendly version Access bypass Image module...
Multiple Cross Site Scripting Vulnerabilities in eGroupWare
--------------------------------------------------------------------------- Multiple Cross Site Scripting Vulnerabilities in eGroupWare --------------------------------------------------------------------------- Author: Joxean Koret Date: 2004 Location: Basque Country...