CandidATS 跨站脚本漏洞

CandidATS is a free and open source recruiter tracking system from CandidATS India. A security vulnerability exists in CandidATS version 3.0.0 that stems from not properly validating user input. An attacker exploits the vulnerability to steal an arbitrary user's cookie...

CandidATS 跨站脚本漏洞

CandidATS is a free and open source recruiter tracking system from CandidATS India. A security vulnerability exists in CandidATS version 3.0.0 that stems from not properly validating user input. An attacker exploits the vulnerability to steal an arbitrary user's cookie...

SalonERP 跨站脚本漏洞

SalonERP is a salon management software by Thomas Sparber, a personal developer. A security vulnerability exists in SalonERP version 3.0.2 that stems from not properly validating page parameters. An attacker could use this vulnerability to steal an arbitrary user's cookie...

PT-2022-26536 · Candidats · Candidats

Name of the Vulnerable Software and Affected Versions: CandidATS version 3.0.0 Description: The issue allows an external attacker to steal the cookie of arbitrary users. This is possible because the application does not properly validate user input against XSS attacks, specifically on the...

PT-2022-26537 · Candidats · Candidats

Name of the Vulnerable Software and Affected Versions: CandidATS version 3.0.0 Description: The issue allows an external attacker to steal the cookie of arbitrary users. This is possible because the application does not properly validate user input against XSS attacks, specifically on the sortBy...

PT-2022-26539 · Candidats · Candidats

Name of the Vulnerable Software and Affected Versions: CandidATS version 3.0.0 Description: The issue allows an external attacker to steal the cookie of arbitrary users. This is possible because the application does not properly validate user input against XSS attacks, specifically on the 'page' ...

CVE-2022-42750

CandidATS version 3.0.0 allows an external attacker to steal the cookie of arbitrary users. This is possible because the application does not correctly validate the files uploaded by the user...

PT-2022-26543 · Salonerp · Salonerp

Name of the Vulnerable Software and Affected Versions: SalonERP version 3.0.2 Description: The issue allows an external attacker to steal the cookie of arbitrary users. This is possible because the application does not correctly validate the page parameter against XSS attacks. Recommendations: Fo...

CVE-2022-42753

SalonERP 3.0.2 is vulnerable to an external attacker stealing arbitrary users’ cookies due to improper validation of the page parameter against XSS. The root cause is inadequate input validation that allows cookie theft through XSS-like manipulation. Impact is confidentiality (cookie leakage) wit...

CVE-2022-42746

CandidATS 3.0.0 has a cross-site scripting (XSS) vulnerability via the indexFile parameter of ajax.php. The Nuclei template and related sources describe that an attacker can inject arbitrary script into the victim’s browser, enabling cookie-based credential theft and potential session hijacking. ...

CVE-2022-42747

CandidATS 3.0.0 is vulnerable to a Cross‑Site Scripting (XSS) flaw in the sortBy parameter of ajax.php. An attacker can inject scripts to steal cookies from victims. The issue is documented across several sources (NVD, Nuclei template, Red Hat advisory). Remediation options cited include upgradin...

CVE-2022-42749

CandidATS version 3.0.0 on 'page' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because the application application does not properly validate user input against XSS attacks...

CVE-2022-42753

SalonERP version 3.0.2 allows an external attacker to steal the cookie of arbitrary users. This is possible because the application does not correctly validate the page parameter against XSS attacks...

CVE-2022-42748

CandidATS version 3.0.0 on 'sortDirection' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because the application application does not properly validate user input against XSS attacks...

CVE-2022-42749

CandidATS version 3.0.0 on 'page' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because the application application does not properly validate user input against XSS attacks...

Reflected Cross Site Scripting leading to session hijacking

Description Basic XSS: XSS Cross-Site Scripting vulnerabilities arise when untrusted data gets interpreted as code in a web context. XSS attacks effectively make the attacker logged in as the target user, with the nasty addition of tricking the user into giving some information such as their...

CVE-2022-41679

Forma LMS version 3.1.0 and earlier are affected by an Cross-Site scripting vulnerability, that could allow a remote attacker to inject javascript code on the “backurl” parameter in appLms/index.php?modname=faq&op=play function. The exploitation of this vulnerability could allow an attacker to...

PT-2022-26020 · Forma Lms · Forma Lms

Name of the Vulnerable Software and Affected Versions: Forma LMS versions 3.1.0 and earlier Description: The issue allows a remote attacker to inject javascript code on the back url parameter in the "appLms/index.php?modname=faq&op=play" function, potentially leading to the theft of user cookies...

Forma Learning Management System 跨站脚本漏洞

Forma Learning Management System LMS is a Learning Management System LMS. A security vulnerability exists in Forma Learning Management System 3.1.0 and prior versions, which originated from a vulnerability that allows remote attackers to inject JavaScript code into the backurl parameter, which ca...

WordPress plugin Log HTTP Requests 跨站脚本漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Log HTTP Requests plugin 1.3.1 and earlier versions, which can be exploited by an attacke...