CVE-2023-38827

Cross Site Scripting vulnerability in Follet School Solutions Destiny v.2001AU4 and later allows a remote attacker to run arbitrary code via presentonesearchresultsform.do...

CVE-2023-38827

Cross Site Scripting vulnerability in Follet School Solutions Destiny v.2001AU4 and later allows a remote attacker to run arbitrary code via presentonesearchresultsform.do...

Cross site scripting

Cross Site Scripting vulnerability in Follet School Solutions Destiny v.2001AU4 and later allows a remote attacker to run arbitrary code via presentonesearchresultsform.do...

CVE-2023-38827

Summary: CVE-2023-38827 is a cross-site scripting vulnerability in Follet School Solutions Destiny (v.20_0_1_AU4 and later) that enables a remote attacker to run arbitrary code via the API endpoint presentonesearchresultsform.do . The connected documents confirm the affected product/version range...

CVE-2023-38827: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Follet School Solutions Destiny v.2001AU4 and later allows a remote attacker to run arbitrary code via presentonesearchresultsform.do...

Follet School Solutions Destiny Security Breach

Follet School Solutions Destiny is a school solution from Follet School Solutions Destiny, Inc. A security vulnerability exists in Follet School Solutions Destiny v.2001AU4 and later versions that stems from the presence of a cross-site scripting XSS vulnerability. An attacker can run arbitrary...

CVE-2023-38827

Cross Site Scripting vulnerability in Follet School Solutions Destiny v.2001AU4 and later allows a remote attacker to run arbitrary code via presentonesearchresultsform.do...

CVE-2023-38826

A Cross Site Scripting XSS vulnerability exists in Follet Learning Solutions Destiny through 20.01U. via the handlewpesearchform.do. searchString...

CVE-2023-38826

A Cross Site Scripting XSS vulnerability exists in Follet Learning Solutions Destiny through 20.01U. via the handlewpesearchform.do. searchString...

Cross site scripting

A Cross Site Scripting XSS vulnerability exists in Follet Learning Solutions Destiny through 20.01U. via the handlewpesearchform.do. searchString...

CVE-2023-38826

CVE-2023-38826 — Follett Destiny (through 20.0 1U) is a Cross Site Scripting (XSS) issue exploitable via the handlewpesearchform.do endpoint, specifically through the searchString parameter. The PT-2023-26613 entry confirms affected software and versions and provides concrete exploit context, inc...

CVE-2023-38826: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS vulnerability exists in Follet Learning Solutions Destiny through 20.01U. via the handlewpesearchform.do. searchString...

Follet Learning Solutions Destiny Security Breach

Follet Learning Solutions Destiny is an educational management system from Follet Learning, Inc. A security vulnerability exists in Follet Learning Solutions Destiny version 20.01U and prior versions, which stems from a Reflected Cross-Site Scripting XSS vulnerability in the component...

CVE-2023-38826

A Cross Site Scripting XSS vulnerability exists in Follet Learning Solutions Destiny through 20.01U. via the handlewpesearchform.do. searchString...

PT-2023-26613 · Follett · Follett Destiny

Name of the Vulnerable Software and Affected Versions: Follet Learning Solutions Destiny versions through 20.0 1U Description: A Cross Site Scripting XSS issue exists, allowing exploitation via the "handlewpesearchform.do" endpoint, specifically through the searchString variable. Recommendations:...

PT-2023-26614 · Follett · Follet School Solutions Destiny

Name of the Vulnerable Software and Affected Versions: Follet School Solutions Destiny versions 20 0 1 AU4 and later Description: The issue allows a remote attacker to run arbitrary code via the "presentonesearchresultsform.do" API endpoint. This enables the execution of arbitrary code, potential...

clan7ups SQL注入漏洞

clan7ups is an offshoot of the old Destiny Universal Point System. An SQL injection vulnerability exists in antonbolling clan7ups, which stems from a problem with the unknown functionality of the component Login/Session, leading to SQL injection...

destiny.gg chat 跨站请求伪造漏洞

destiny.gg chat is destiny.gg open source a destin.gg chat backend. destiny.gg chat suffers from a cross-site request forgery vulnerability that stems from a problem with the function websocket.Upgrader in the file main.go, which could lead to cross-site request forgery...

PT-2022-9020 · Unknown · Destiny.Gg Chat

Name of the Vulnerable Software and Affected Versions: destiny.gg chat affected versions not specified Description: A vulnerability was found in the destiny.gg chat, affecting the function websocket.Upgrader of the file main.go. The manipulation leads to cross-site request forgery, and the attack...

destiny-ideas.com Cross Site Scripting vulnerability OBB-2662218

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...