The vulnerability in the `app\admin\groups\edit-group.php` file of the PHPIPAM web application allows a attacker to perform XSS attacks.

The vulnerability in the app\admin\groups\edit-group.php file of the IP address management web application exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability in the web application for managing IP addresses, app\admin\firewall-zones\zones-edit-network.php, allows a attacker to execute XSS attacks.

The vulnerability in the app\admin\firewall-zones\zones-edit-network.php web application for managing IP addresses via phpipam exists due to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...

The vulnerability in the web application for managing IP addresses, phpipam’s /app/admin/powerDNS/record-edit.php script, allows a attacker to execute XSS attacks.

The vulnerability in the web application for managing IP addresses, /app/admin/powerDNS/record-edit.php, exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...

XWiki Platform vulnerable to document deletion and overwrite from edit

Impact When a user has edit but not view right on a page in XWiki, that user can delete the page and replace it by a page with new content without having delete right. The previous version of the page is moved into the recycle bin and can be restored from there by an admin. As the user is recorde...

GHSA-33GP-GMG3-HFPQ XWiki Platform vulnerable to document deletion and overwrite from edit

Impact When a user has edit but not view right on a page in XWiki, that user can delete the page and replace it by a page with new content without having delete right. The previous version of the page is moved into the recycle bin and can be restored from there by an admin. As the user is recorde...

CVE-2024-37898

XWiki Platform (CVE-2024-37898) has a documented issue where a user with view but not delete rights can delete a page and replace it with new content, moving the old version to the recycle bin. Although the old content is not viewable due to rights transfer, the action results in the page being o...

CVE-2024-37898 XWiki Platform vulnerable to document deletion and overwrite from edit

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When a user has view but not edit right on a page in XWiki, that user can delete the page and replace it by a page with new content without having delete right. The previous version of the pag...

PT-2024-29654 · Unknown · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 15.10.8 XWiki Platform versions prior to 16.3.0RC1 Description: The issue allows an attacker to execute JavaScript snippets on the side of another user, compromising the confidentiality, integrity, and...

The vulnerability in the `app\admin\groups\edit-group.php` file of the PHPIPAM web application allows a attacker to perform XSS attacks.

The vulnerability in the app\admin\groups\edit-group.php file of the IP address management web application exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

CVE-2024-7225

A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /Script/admin/core/updatepolicy of the component Edit Insurance Policy Page. The manipulation of the argument pname leads to cross site...

AccPack Buzz Cop 1.0 Cross Site Request Forgery

============================================================================================================================================= | Title : AccPack Buzz Cop v1.0 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | |...

CVE-2024-41353

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\groups\edit-group.php...

CVE-2024-41356

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\firewall-zones\zones-edit-network.php...

CVE-2024-41353

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\groups\edit-group.php...

phpIPAM 安全漏洞

phpIPAM is the phpIPAM open source suite of open source PHP and MySQL based IP address management applications IPAM. A security vulnerability exists in phpIPAM version 1.6, which stems from a cross-site scripting vulnerability contained in the /app/admin/powerDNS/record-edit.php file...

CVE-2024-41353

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\groups\edit-group.php...

CVE-2024-41353

CVE-2024-41353 affects phpIPAM 1.6, with a Cross Site Scripting (XSS) vulnerability in app/admin/groups/edit-group.php. The issue is documented across multiple feeds (NVD, Red Hat, OSV, CNNVD, CVE list, CVE.org) noting XSS via the affected script. The exposed component is the edit-group.php handl...

CVE-2024-41353

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\groups\edit-group.php...

phpIPAM 安全漏洞

phpIPAM is the phpIPAM open source suite of open source PHP and MySQL based IP address management applications IPAM. A security vulnerability exists in phpIPAM version 1.6, which stems from a cross-site scripting vulnerability contained in the /app/admin/widgets/edit.php file...

Absolute Secure Access 安全漏洞

Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in Absolute Secure Access versions prior to 13.07 that stems from a cross-site scripting vulnerability in the management...