Six Apart Movable Type Cross-Site Scripting Vulnerability (CNVD-2022-22647)

Six Apart Movable Type MT is a blogging system from Six Apart, a US-based company. A cross-site scripting vulnerability exists in Six Apart Movable Type, which stems from the lack of proper validation of client-side data in the WEB application and can be exploited to inject arbitrary script or HT...

HotelDruid 跨站脚本漏洞

HotelDruid is a hotel management system by the Digitaldruid.net team. The system includes features such as room management, financial management and inventory management. Digital Druid HotelDruid 3.0.2 suffers from a cross-site scripting vulnerability that stems from a lack of proper validation o...

Six Apart Movable Type 跨站脚本漏洞

Six Apart Movable Type MT is a blogging system from Six Apart, a US-based company. The system includes multi-user, commenting, quoting and theming features.Six Apart Movable Type suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data in...

Six Apart Movable Type 跨站脚本漏洞

Six Apart Movable Type MT is a blogging system from Six Apart, a US-based company. A cross-site scripting vulnerability exists in Six Apart Movable Type, which stems from the lack of proper validation of client-side data in the WEB application and can be exploited to inject arbitrary script or HT...

WordPress plugin Contact Form 7 Captcha 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...

WordPress plugin WPFront Scroll Top 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the...

EyouCMS Cross-Site Scripting Vulnerability (CNVD-2021-82434)

EyouCMS is an open source content management system CMS based on ThinkPHP.EyouCMS has a cross-site scripting vulnerability in version 1.3.6, which stems from a lack of validation of user input data and filtering of input data in the basicinformation area. An attacker could use this vulnerability ...

Phpgurukul Vehicle Parking Management System 跨站脚本漏洞

Phpgurukul Vehicle Parking Management System is a parking management system by the PHPGurukul Phpgurukul team. Phpgurukul Vehicle Parking Management System 1.0 suffers from a cross-site scripting vulnerability that stems from a lack of proper validation of client-side data by the web application...

Zoo Management System 'Multiple' Cross-Site Scripting Vulnerability

Zoo Management System is a zoo management system. Zoo Management System 'Multiple' contains a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit this vulnerability to execute client-side code...

Brace yourselves: Holiday shopping season is coming

The E-commerce market has seen tremendous revenue growth during the pandemic. Along with that good news for E-business, there has been an increase in fraudulent activities online that may cost retailers over $20 billion in losses by the end of 2021. According to eMarketer, worldwide retail...

Cyberoam NetGenie 跨站脚本漏洞

Cyberoam NetGenie is a router. Cyberoam NetGenie suffers from a cross-site scripting vulnerability that stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side code...

xArrow SCADA 跨站脚本漏洞

xArrow SCADA is an installer for industrial control products from xArrow in China. A cross-site scripting vulnerability exists in xArrow SCADA. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execut...

ATutor 跨站脚本漏洞

ATutor is a set of open source Web-based Learning Content Management System LCMS from the ATutor Atutor team. The system includes modules for teaching content management, forums, chat rooms, and more. A cross-site scripting vulnerability exists in ATutor, which stems from the failure of the...

WordPress 插件跨站脚本漏洞

WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress plugin Multiplayer Games. The vulnerability stems from a lack of proper validation of client-side data in the web application. An attacker can exploit this vulnerabili...

[SECURITY] [DLA 2734-1] curl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2734-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk August 09, 2021 https://wiki.debian.org/LTS -...

Domainmod Cross-Site Scripting Vulnerability (CNVD-2021-70164)

A cross-site scripting vulnerability exists in Domainmod, a PHP and MySQL-based open source application for managing domain names and other Internet assets in a central location from the Domainmod community, which stems from the lack of proper validation of client-side data by the web application...

Domainmod 跨站脚本漏洞

A cross-site scripting vulnerability exists in Domainmod, a PHP and MySQL-based open source application for managing domain names and other Internet assets in a central location from the Domainmod community, which stems from the lack of proper validation of client-side data by the web application...

NETGEAR RAX40 跨站脚本漏洞

NETGEAR RAX40 is a 4-stream AX3000 dual-band WiFi 6 router.NETGEAR RAX40 versions prior to 1.0.3.64 are vulnerable to a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit this vulnerability to...

Denial of Service in cortezaproject/corteza-server

You can put a very long login email text until you get the last user to put and aries or DoS. Normally emails have 64 to 225 digits. Summary There is no limit to the number of characters in the login email, which allows a DoS attack. The DoS attack affects both server-side and client-side. NOTE:...

JetBrains YouTrack Cross-Site Scripting Vulnerability (CNVD-2022-09231)

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. A cross-site scripting vulnerability exists in versions of JetBrains YouTrack prior to 2021.2.17925, which stems from the lack of proper validation of client-side data in the web...