CVE-2021-44217

CVE-2021-44217 推奨される説明 Ericsson CodeChecker 6.18.0以前では、 レポートビューアのコメントコンポーネントにおける保存型クロスサイトスクリプティング（XSS）の脆弱性により、 リモートの攻撃者が /CodeCheckerService API のPOST JSONデータを介して任意のWebスクリプトまたはHTMLを注入できる可能性があります。 追加情報 CodeChecker Webサーバーには、異なる権限を持つユーザーを分離するための権限システムがあります。また、各ユーザーのCookieを document.cookie...

CVE-2009-4650

SQL injection vulnerability in the Webee Comments comwebeecomment component 1.1.1, 1.2, and 2.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a default action to index2.php. NOTE: some of these details are obtained from third party informatio...

CVE-2021-44217

In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting XSS vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API...

PYSEC-2022-43181

In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting XSS vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API...

PT-2022-12020

Name of the Vulnerable Software and Affected Versions Ericsson CodeChecker versions prior to 6.18.2 Description A Stored Cross-site scripting XSS vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of...

Webee Comments Component 1.1/1.2 for Joomla! index2.php articleId SQL Injection

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '86842' ssvid version = '1.0' author = 'kikay' vulDate = '2010-02-22' createDate ...