Code injection

This affects the package Crow before 0.3+4. It is possible to traverse directories to fetch arbitrary files from the server...

CVE-2021-23824 Content Injection

This affects the package Crow before 0.3+4. When using attributes without quotes in the template, an attacker can manipulate the input to introduce additional attributes, potentially executing code. This may lead to a Cross-site Scripting XSS vulnerability, assuming an attacker can influence the...

CVE-2021-23824

The CVE-2021-23824 entry concerns Crow (C/C++ micro-framework). Concrete details across connected sources show thatCrow before 0.3+4 is vulnerable when rendering templates that interpolate attributes without quotes; an attacker can inject attributes to manipulate input, enabling Cross‑site Script...

CVE-2021-23514 Path Traversal

This affects the package Crow before 0.3+4. It is possible to traverse directories to fetch arbitrary files from the server...

CVE-2021-23514

CVE-2021-23514 affects Crow before 0.3+4. A path traversal flaw allows an attacker to traverse directories and fetch arbitrary files from the server via supported endpoints. The vulnerability is described across multiple sources (e.g., NVD/CVE entry; CNVD/CNNVD; Snyk references) as a directory tr...

Crow 路径遍历漏洞

Crow is a C micro-framework for running Web services, and a security vulnerability exists in Crow that could be exploited by an attacker to traverse directories and obtain arbitrary files from the server...

Crow 跨站脚本漏洞

Crow is a C micro-framework for running Web services, and a security vulnerability exists in Crow that could be exploited to allow an attacker to manipulate input to introduce additional properties to potentially execute arbitrary code...

Content Injection

Overview Affected versions of this package are vulnerable to Content Injection. When using attributes without quotes in the template, an attacker can manipulate the input to introduce additional attributes, potentially executing code. This may lead to a Cross-site Scripting XSS vulnerability,...

crow-moddiechevrolet.com XSS vulnerability

Vulnerable URL: http://www.crow-moddiechevrolet.com/VehicleSearchResults?bodyType=SUV%22%3E%3Csvg/onload=confirm%28/xssposed/%29// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9689873 Google Pagerank| 1 VIP...

Union leader Crow claims phone was hacked !

Firebrand abutment baton Bob Crow on Monday became the best recent accessible amount to accuse to the badge that his buzz has been afraid by journalists. Lawyers for Bob Crow, general-secretary of the Rail, Maritime and Carriage Workers' union, accept accounting to London's Metropolitan Badge...