CVE-2023-33762

CVE-2023-33762 affects eMedia Consulting simpleRedak up to v2.47.23.05, with a SQL injection via the Activity parameter. Vulnerable component/versions are confirmed by multiple connected sources. Impact, per CVSS: high confidentiality, integrity, and availability risk (CRITICAL). Exploitation is ...

CVE-2023-33763

CVE-2023-33763 concerns the eMedia Consulting simpleRedak product up to version 2.47.23.05, with a reflected XSS in the /scheduler/index.php component. The CVE is supported by multiple connected sources (NVD/Red Hat/PRION/CNNVD) indicating a reflected XSS vector, network attack surface, low impac...

CVE-2023-33763

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /scheduler/index.php...

CVE-2023-33761

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /view/cb/format642.php...

CVE-2023-33761

The CVE relates to eMedia Consulting simpleRedak up to v2.47.23.05, affected by a Reflected Cross-Site Scripting (XSS) vulnerability exploitable via the component /view/cb/format_642.php. The NVD/CNA metrics show a CVSSv3.1 base score of 6.1 (Medium) with Network attack vector, Low impact on conf...

CVE-2023-33763

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /scheduler/index.php...

CVE-2023-33762

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a SQL injection vulnerability via the Activity parameter...

CVE-2023-33761

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /view/cb/format642.php...

CVE-2023-33764

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a stored cross-site scripting XSS vulnerability via the component /de/casting/show/detail/...

CVE-2023-33764

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a stored cross-site scripting XSS vulnerability via the component /de/casting/show/detail/...

CVE-2023-33764

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a stored cross-site scripting XSS vulnerability via the component /de/casting/show/detail/...

Cross site scripting

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a stored cross-site scripting XSS vulnerability via the component /de/casting/show/detail/...

CVE-2023-33764

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a stored cross-site scripting XSS vulnerability via the component /de/casting/show/detail/...

CVE-2023-33764

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a stored cross-site scripting XSS vulnerability via the component /de/casting/show/detail/...

CVE-2023-33764

Vulnerability summary (CVE-2023-33764) : The eMedia Consulting product simpleRedak up to version 2.47.23.05 is affected by a stored Cross-Site Scripting (XSS) vulnerability exposed through the endpoint component/path #/de/casting/show/detail/ . The available connected documents consistently ident...

Phishing Domains Tanked After Meta Sued Freenom

The number of phishing websites tied to domain name registrar Freenom dropped precipitously in the months surrounding a recent lawsuit from social networking giant Meta, which alleged the free domain name provider has a long history of ignoring abuse complaints about phishing websites while...

globis-consulting.com Cross Site Scripting vulnerability OBB-3327987

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

jfinal cms 安全漏洞

jfinal cms is a java development of powerful information consulting website , using a simple and powerful JFinal as the web framework , template engine with beetl , database with mysql , front-end bootstrap framework . jfinal cms v5.1.0 version of a security vulnerability , the source of the...

rubik-consulting.com Cross Site Scripting vulnerability OBB-3271578

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

gauer-consulting.com Cross Site Scripting vulnerability OBB-3271246

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...