124 matches found
CVE-2020-27406
Cross Site Scripting XSS vulnerability in DynPG 4.9.1, allows authenticated attackers to execute arbitrary code via the groupname...
CVE-2020-27406
DynPG 4.9.1 is affected by a Cross Site Scripting (XSS) vulnerability via the groupname field. The issue allows authenticated attackers to execute arbitrary code. Root cause is described as XSS, but the connected documents do not provide specific exploit paths, affected versions beyond 4.9.1, or ...
DynPG 跨站脚本漏洞
Dynpg Organization Dynpg is Dynpg Organization an open source application. It is used to create web sites. A security vulnerability exists in DynPG, which stems from the WEB application's lack of proper validation of client-side data. An attacker can exploit the vulnerability to execute client-si...
PT-2021-11391
Name of the Vulnerable Software and Affected Versions: DynPG version 4.9.1 Description: The issue allows authenticated attackers to execute arbitrary code via the groupname. This is a Cross Site Scripting XSS issue. Recommendations: For DynPG version 4.9.1, at the moment, there is no information...
CVE-2020-27406: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in DynPG 4.9.1, allows authenticated attackers to execute arbitrary code via the groupname...
DynPG Cross-Site Scripting Vulnerability (CNVD-2021-22968)
DynPG is a free open source software for managing web content and modules while focusing on business process automation. A cross-site scripting vulnerability exists in DynPG 4.9.2. A remote attacker can exploit this vulnerability by injecting JavaScript via the "query" parameter...
DynPG Cross-Site Scripting Vulnerability (CNVD-2021-22967)
DynPG is a free open source software for managing web content and modules while focusing on business process automation. A cross-site scripting vulnerability exists in DynPG 4.9.2. A remote attacker can exploit this vulnerability to inject JavaScript via a URI in /index.php...
DynPG Cross-Site Scripting Vulnerability (CNVD-2021-22966)
DynPG is a free open source software for managing web content and modules while focusing on business process automation. A cross-site scripting vulnerability exists in DynPG 4.9.2. A remote attacker can exploit this vulnerability by injecting JavaScript via the "limit" parameter...
DynPG Cross-Site Scripting Vulnerability (CNVD-2021-22965)
DynPG is a free open source software for managing web content and modules while focusing on business process automation. A cross-site scripting vulnerability exists in DynPG 4.9.2. A remote attacker can exploit this vulnerability by injecting JavaScript via the "refID" parameter...
DynPG Cross-Site Scripting Vulnerability (CNVD-2021-22964)
DynPG is a free open source software for managing web content and modules while focusing on business process automation. A cross-site scripting vulnerability exists in DynPG 4.9.2. A remote attacker can exploit this vulnerability by injecting JavaScript via the "valueID" parameter...
DynPG Cross-Site Scripting Vulnerability
DynPG is a free open source software for managing web content and modules while focusing on business process automation. A cross-site scripting vulnerability exists in DynPG 4.9.2. A remote attacker can exploit this vulnerability by injecting JavaScript via the "page" parameter...
CVE-2021-27529
A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "limit" parameter...
CVE-2021-27530
A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allow remote attacker to inject javascript via URI in /index.php...
CVE-2021-27528
A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "refID" parameter...
CVE-2021-27526
A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "page" parameter...
CVE-2021-27531
A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "query" parameter...
CVE-2021-27527
A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "valueID" parameter...
CVE-2021-27526
A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "page" parameter...