EUVD-2013-4791

Malware in sbrugna...

PT-2024-32837 · Elabftw · Elabftw

Name of the Vulnerable Software and Affected Versions: eLabFTW versions prior to 5.1.5 Description: A vulnerability in eLabFTW allows an attacker to inject arbitrary HTML tags in the pages "experiments.php" show mode, "database.php" show mode, or "search.php". This is achieved by providing HTML...

Cross-site Scripting (XSS)

LimeSurvey is vulnerable to cross-site scripting XSS. An authenticated users with correct permissions is able to inject and execute malicious script via the parameter ParticipantAttributeNamesDropdown of the Attributes on the central participant database page...

CVE-2020-25798

A stored cross-site scripting XSS vulnerability in LimeSurvey before and including 3.21.1 allows authenticated users with correct permissions to inject arbitrary web script or HTML via parameter ParticipantAttributeNamesDropdown of the Attributes on the central participant database page. When the...

File Upload Vulnerability in the DB***.aspx Page of the Backend of Ice Order Treasure

Ice point ordering treasure is unit enterprise internal canteen ordering management software, through the cell phone APP WeChat ordering, for canteen ordering consumption management. There is a file upload vulnerability in the DB.aspx page in the background of Freezing Point Food Ordering Treasur...

CVE-2013-4947

Unspecified vulnerability in the update and build database page in Sawmill before 8.6.3 allows remote attackers to have unknown impact and attack vectors...

CVE-2011-4875

creationtimestamp| type| source ---|---|--- 2011-11-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18166...

CVE-2009-0103

creationtimestamp| type| source ---|---|--- 2009-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7687...

CVE-2008-7115

creationtimestamp| type| source ---|---|--- 2008-08-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6305...

CVE-2008-2412

creationtimestamp| type| source ---|---|--- 2008-05-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31801...

CVE-2008-2224

creationtimestamp| type| source ---|---|--- 2008-05-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5566...