4876 matches found
CVE-2021-46445
H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/categories.php?boxgroupid...
CVE-2021-46445
H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/categories.php?boxgroupid...
Mageia: Security Advisory (MGASA-2019-0236)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2022-12712
Name of the Vulnerable Software and Affected Versions H.H.G Multistore versions 5.1.0 and below Description A SQL injection issue was found via the "/admin/categories.php?box group id" endpoint. This allows for potential exploitation. Recommendations For versions 5.1.0 and below, consider...
CVE-2021-46083
uscat, as of 2021-12-28, is vulnerable to Cross Site Scripting XSS via the input box of the statistical code...
Cross site scripting
uscat, as of 2021-12-28, is vulnerable to Cross Site Scripting XSS via the input box of the statistical code...
Cross site scripting
A problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that can be injected through the nickname input box...
CVE-2021-46083
uscat, as of 2021-12-28, is vulnerable to Cross Site Scripting XSS via the input box of the statistical code...
CVE-2021-46083
uscat, as of 2021-12-28, is vulnerable to Cross Site Scripting XSS via the input box of the statistical code...
CVE-2021-46084
CVE-2021-46084 affects uscat, a forum system based on Javaex + Ssm. The vulnerability is a Cross Site Scripting (XSS) issue via the "close registration information" input box. The connected documents confirm the vulnerability exists but do not provide exploitation details, affected versions, or r...
CVE-2021-46084
uscat, as of 2021-12-28, is vulnerable to Cross Site Scripting XSS via "close registration information" input box...
CVE-2021-46034
ForestBlog is affected by a cross-site scripting (XSS) vulnerability exploitable via the nickname input box. The issue stems from insufficient validation of client-side data, allowing injected JavaScript to execute in the victim’s browser. Public references describe the vulnerability across multi...
CVE-2021-46034
A problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that can be injected through the nickname input box...
PT-2022-12516
Name of the Vulnerable Software and Affected Versions ForestBlog affected versions not specified Description A problem was found in ForestBlog, where there is a XSS vulnerability that can be injected through the nickname input box. Recommendations At the moment, there is no information about a...
Uscat 跨站脚本漏洞
Uscat is a forum system based on Javaex + Ssm development. A cross-site scripting vulnerability exists in uscat, which stems from an input box via statistical code that is susceptible to cross-site scripting XSS attacks...
CVE-2021-46083: Improper Neutralization of Input During Web Page Generation
uscat, as of 2021-12-28, is vulnerable to Cross Site Scripting XSS via the input box of the statistical code...
CVE-2021-46034: Improper Neutralization of Input During Web Page Generation
A problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that can be injected through the nickname input box...
Box 2FA Bypass Opens User Accounts to Attack
UPDATE A security hole in Box, the cloud-based file-sharing service, paved the way for busting its multifactor authentication MFA, researchers said – and it’s the second such MFA bypass they have discovered in the service so far. Clearly, the stakes are high – gaining access to a Box account coul...
Researchers Bypass SMS-based Multi-Factor Authentication Protecting Box Accounts
Cybersecurity researchers have disclosed details of a now-patched bug in Box's multi-factor authentication MFA mechanism that could be abused to completely sidestep SMS-based login verification. "Using this technique, an attacker could use stolen credentials to compromise an organization's Box...