CVE-2021-27529

CVE-2021-27529 is a documented cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 that allows remote attackers to inject JavaScript via the "limit" parameter. Affected software: DynPG 4.9.2. Root cause and precise impact details beyond the described JavaScript injection via the limit...

CVE-2021-27529

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "limit" parameter...

Dynpg organization: Dynpg cross-site scripting vulnerabilities

DynPG is a free open source software for managing web content and modules while focusing on business process automation. A cross-site scripting vulnerability exists in DynPG 4.9.2. A remote attacker can exploit this vulnerability by injecting JavaScript via the "refID" parameter...

Dynpg organization: Dynpg cross-site scripting vulnerabilities

DynPG is a free open source software for managing web content and modules while focusing on business process automation. A cross-site scripting vulnerability exists in DynPG 4.9.2. A remote attacker can exploit this vulnerability by injecting JavaScript via the "limit" parameter...

Dynpg organization: Dynpg cross-site scripting vulnerabilities

DynPG is a free open source software for managing web content and modules while focusing on business process automation. A cross-site scripting vulnerability exists in DynPG 4.9.2. A remote attacker can exploit this vulnerability to inject JavaScript via a URI in /index.php...

Dynpg organization: Dynpg cross-site scripting vulnerabilities

DynPG is a free open source software for managing web content and modules while focusing on business process automation. A cross-site scripting vulnerability exists in DynPG 4.9.2. A remote attacker can exploit this vulnerability by injecting JavaScript via the "query" parameter...

PT-2021-17498

Name of the Vulnerable Software and Affected Versions DynPG version 4.9.2 Description A cross-site scripting XSS issue allows a remote attacker to inject javascript via the URI in the "/index.php" API endpoint. This can be exploited by manipulating the javascript code injected into the URI...

CVE-2021-27526: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "page" parameter...

CVE-2021-27527: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "valueID" parameter...

CVE-2021-27530: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allow remote attacker to inject javascript via URI in /index.php...

CVE-2021-27528: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "refID" parameter...

CVE-2021-27531: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "query" parameter...

CVE-2021-27529: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "limit" parameter...

PT-2021-17499

Name of the Vulnerable Software and Affected Versions DynPG version 4.9.2 Description A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the query parameter. This enables attackers to execute malicious scripts on the client-side, potentially leading to unauthorized...

PT-2021-17496

Name of the Vulnerable Software and Affected Versions DynPG version 4.9.2 Description A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the refID parameter. This enables attackers to execute malicious scripts on the victim's browser. Recommendations For DynPG versi...

PT-2021-17494

Name of the Vulnerable Software and Affected Versions DynPG version 4.9.2 Description A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the page parameter. This enables attackers to execute malicious scripts on the victim's browser. Recommendations For DynPG versio...

PT-2021-17495

Name of the Vulnerable Software and Affected Versions DynPG version 4.9.2 Description A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the valueID parameter. This enables attackers to execute malicious scripts on the client-side, potentially leading to unauthorize...

PT-2021-17497

Name of the Vulnerable Software and Affected Versions DynPG version 4.9.2 Description A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the limit parameter. This enables attackers to execute malicious scripts on the client-side, potentially leading to unauthorized...

Dynpg organization: Dynpg cross-site scripting vulnerabilities

DynPG is a free open source software for managing web content and modules while focusing on business process automation. A cross-site scripting vulnerability exists in DynPG 4.9.2. A remote attacker can exploit this vulnerability by injecting JavaScript via the "valueID" parameter...

DynPG 4.9.1 Cross Site Scripting

Exploit Title: DynPG 4.9.1 - Persistent Cross-Site Scripting Authenticated Date: 2020-10-09 Exploit Author: Enes Özeser Vendor Homepage: https://dynpg.org/ Version: 4.9.1 Tested on: Windows & XAMPP == Tutorial alert"XSS"; == HTTP Request alert"XSS";...