26 matches found
CVE-2021-42664
A Stored Cross Site Scripting XSS Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the 1 Quiz title and 2 quiz description parameters to addquiz.php. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which c...
WonderCMS Cross-Site Scripting Vulnerability (CNVD-2020-75630)
WonderCMS is an open source, fast, small and simple flat file cms. A cross-site scripting vulnerability exists in the "Page Description" component of WonderCMS 3.1.3. An attacker can exploit this vulnerability to steal cookies...
Dell EMC Isilon Cross-Site Scripting Vulnerability
DELL EMC Isilon is a horizontally scalable storage system for unstructured data from Dell.OneFS web administration interface is one of the web administration interfaces. A cross-site scripting vulnerability exists in the Cluster description of the OneFS web administration interface in Dell EMC...
VuFind 1.0 Cross Site Scripting
VuFind 1.0 Web Application Reflected XSS Cross-site Scripting 0-Day Bug Security Issue Exploit Title: VuFind Results? &lookfor parameter Reflected XSS Web Security Vulnerability Product: VuFind Vendor: VuFind Vulnerable Versions: 1.0 Tested Version: 1.0 Advisory Publication: September 20, 2015...
IndyNews - PhpNuke module: several problems
IndyNews is a PhpNuke add-on that allows users to include media files images, documents and so on to articles. While I was playing with the module, I've found several problems. 1 function delMediaFile Anybody is able to delete any media attached to already approved articles. 2 function manageMedi...