46 matches found
CVE-2024-10744
A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/assets/plugins/DataTables/media/unittesting/templates/complexheader2.php. The manipulation of the argument scripts...
WordPress Graphicsly plugin <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability
Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin Graphicsly versions = 1.0.2...
CVE-2021-4046
The mtxtNom y mtxtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks. This vulnerability could be used to carry out a number of browser-based attacks including browser hijacking or theft of sensitive data...
yellownepal.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1065107 Security Researcher geeknik Helped patch 8924 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting yellownepal.com website an...
CVE-2019-0335
Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console, versions 4.1, 4.2, 4.3, allows an attacker to store a malicious payload within the description field of a user account. The payload is triggered when the mouse cursor is moved over the...
finnertyandstevens.com XSS vulnerability
Open Bug Bounty ID: OBB-658565 Description| Value ---|--- Affected Website:| finnertyandstevens.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
WordPress Keyword Link Plugin <= 1.7 - CrossSite Scripting (XSS)
Because of this vulnerability, authenticated administrators can store HTML or JS code via "limit" parameter. Solution Update the plugin...
WordPress Ptengine Plugin <= 2.2.2 - 1.0.1 - Reflected CrossSite Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
Media Player Classic security vulnerabilities
Built-in web server DoS and crossite scripting...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Web applications security vulnerabilities (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Multiple McAffee Intrushield IPS (intrusion prevention system) vulnerabilities
Multiple web interface vulnerabilities including crosssite scripting and privilege escalation...
PHP, ASP, CGI web applications security vulnerabilities
PHP inclusions, SQL injections, directory traversals, crossite scripting, etc...
Crystal Enterprise report file crossite scripting
Crossite scripting with report files...
Multiple Macromedia JRun bugs
DoS, source code leakage, session hijacking, crossite scripting, buffer overflow...
IBM Directory Server crossite scripting
Crossite scripting in web managment interface...
Fastream NetFile crossite scripting
Crossite scripting on 404 error page...