XSS Vulnerability in Huaxia ERP

Huaxia ERP based on SpringBoot framework, SaaS model, determined to provide open source for small and medium-sized ERP software, currently focusing on sales and inventory financial functions. Huaxia ERP system there is an XSS vulnerability , an attacker can use this vulnerability to obtain user...

Jiangxi Jinger Technology Co., Ltd. knows that there is an XSS vulnerability in cloud document translation

Zhiyun Literature Translation is a dissertation translation tool. Jiangxi Jinger Technology Co. Zhiyun Literature Translation suffers from an XSS vulnerability, which can be exploited by attackers to obtain user cookie information...

IBOS Enterprise Collaboration Management Software Business Edition Has XSS Vulnerabilities

IBOS Enterprise Collaboration Management Software is an open source office OA system developed by Shenzhen BOS Xiechuang Network Technology Co. IBOS enterprise collaborative management software commercial version of the XSS vulnerability, attackers can use the vulnerability to obtain user cookie...

XSS Vulnerability in SeaCMS

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. SeaCMS has an XSS vulnerability that can be exploited by attackers to obtain user cookie information...

XSS Vulnerability in 53FastService's Online Customer Service System

Zhejiang Fast Service Group Co., Ltd. was established on August 01, 2006 . Legal representative Lou Weibo, the company's business scope includes: general items: technical services, technology development, technology consulting, technology exchanges, technology transfer, technology promotion and s...

Worktile is vulnerable to XSS

Worktile is an enterprise collaboration platform that solves the collaboration, office and management pain points of companies of 30-1,000 people, helping companies implement project management, standardize processes, build knowledge bases, and assist management decisions. Worktile has an XSS...

KindEditor is vulnerable to XSS

KindEditor is a set of open source online HTML editor . KindEditor has an XSS vulnerability that can be exploited by attackers to obtain user cookie information...

XSS Vulnerability in mblog Blog System

mblog is a Java language development , support for mysql/h2 database , using spring-boot, jpa, shiro, bootstrap and other popular frameworks for the development of open-source free blog system . mblog blog system has an XSS vulnerability , an attacker can exploit the vulnerability to obtain user...

Stored XSS Vulnerability at XXL-JOB Added User

XXL-JOB is a lightweight distributed task scheduling platform whose core design goals are rapid development, simple learning, lightweight and easy to extend. A stored XSS vulnerability exists at XXL-JOB new users, which can be exploited by an attacker to obtain user cookie information...

XSS Vulnerability in Bat Online Exam System of Chengdu Scale-Free Network Technology Co.

Founded in November 2014, Chengdu Scale-Free Network Technology Co., Ltd. is a professional organization engaged in the research, development and sales of intelligent software. Chengdu Scale-Free Network Technology Co. Ltd Bat Online Exam System suffers from an XSS vulnerability, which can be...

XSS Vulnerability at jfinal cms publishing blog posts

jfinal cms is a java development of powerful information consulting website , using a simple and powerful JFinal as the web framework , template engine with beetl, database with mysql, front-end bootstrap framework. jfinal cms publish blog posts at the existence of XSS vulnerabilities , attackers...

XSS vulnerability in WeCenter aj***.php

WeCenter is an open source knowledge-based social Q&A community program. An XSS vulnerability exists in WeCenter aj.php, which can be exploited by an attacker to obtain user cookie information...

osTicket 1.14.1 - Persistent Authenticated Cross-Site Scripting

Title: osTicket 1.14.1 - Persistent Authenticated Cross-Site Scripting Author: Mehmet Kelepce / Gais Cyber Security Date : 2020-03-24 Source Link: https://github.com/osticket/osticket/commit/fc4c8608fa122f38673b9dddcb8fef4a15a9c884 Vendor: http://osticket.com Remotely Exploitable: Yes Dynamic...

osTicket 1.14.1 Cross Site Scripting

Title: osTicket 1.14.1 Authenticated Cross Site Scripting Bug: XSS - Cross Site Scripting Remotely Exploitable: Yes Dynamic Coding Language: PHP CVSSv3 Base Score: 7.4 AV:N, AC:L, PR:L, UI:N, S:C, C:L, I:L, A:L Author: Mehmet Kelepce Date : 24-03-2020 Source Link:...

CVE-2020-1987

An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local authenticated user to read VPN cookie information when the troubleshooting logging level is set to "Dump". This issue affects Palo Alto Networks Global Protect Agent 5.0 versio...

XSS Vulnerability in xyhCMS of Kunming Yuntao Technology Co.

Kunming Yuntao Technology Co. xyhCMS is a completely open source set of CMS content management system, simple, easy to use, secure, stable, free. Kunming Yuntao Technology Co. xyhCMS XSS vulnerability, attackers can use the vulnerability to obtain cookie information...

XSS Vulnerability in UKCMS Website Builder System

UKcms is a simple, flexible and powerful web content management system based on PHP and mysql technology. UKCMS website builder system has XSS vulnerability, attackers can exploit the vulnerability to obtain the background administrator COOKIE information...

XSS Vulnerability in Guojiz URL Navigation System (CNVD-2019-35035)

Guojiz website navigation system is a navigation website source code system developed by PHP+MySQL. Guojiz navigation system XSS vulnerability, an attacker can exploit the vulnerability to obtain background user cookie information...

Cross site scripting

TP-Link Archer CR-700 1.0.6 devices have an XSS vulnerability that can be introduced into the admin account through a DHCP request, allowing the attacker to steal the cookie information, which contains the base64 encoded username and password...

CVE-2016-10719

TP-Link Archer CR-700 1.0.6 devices have an XSS vulnerability that can be introduced into the admin account through a DHCP request, allowing the attacker to steal the cookie information, which contains the base64 encoded username and password...