11674 matches found
CVE-2023-27059
A cross-site scripting XSS vulnerability in the Edit Group function of ChurchCRM v4.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Group Name text field...
CVE-2020-19947
Cross Site Scripting vulnerability found in Markdown Edit allows a remote attacker to execute arbitrary code via the edit parameter of the webpage...
Markdown Edit 跨站脚本漏洞
Markdown Edit is an online dropdown editor/viewer by the individual developer Takeharu.Oshida. Markdown Edit has a security vulnerability that stems from the presence of a cross-site scripting XSS vulnerability. The vulnerability can be exploited by an attacker to execute arbitrary code via the...
CVE-2020-19947
Cross Site Scripting vulnerability found in Markdown Edit allows a remote attacker to execute arbitrary code via the edit parameter of the webpage...
CVE-2023-27059
ChurchCRM v4.5.3 is affected by a cross-site scripting (XSS) vulnerability in the Edit Group function, where an attacker can inject arbitrary scripts or HTML via the Edit Group Name field. The issue affects the Edit Group Name input and is supported by multiple sources in the Connected documents,...
PT-2023-11541 · Unknown · Markdown-It
Name of the Vulnerable Software and Affected Versions: Markdown Edit affected versions not specified Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the edit parameter of the webpage. This enables the attacker to perform unauthorized actions on the...
CVE-2023-27059
A cross-site scripting XSS vulnerability in the Edit Group function of ChurchCRM v4.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Group Name text field...
CVE-2020-19947
CVE-2020-19947 corresponds to a Cross Site Scripting vulnerability in Markdown Edit, enabling a remote attacker to execute arbitrary code through the webpage’s edit parameter . The core entry lists a CRITICAL CVSS v3.1 base score (9.6) with Network attack vector, no privileges required and user i...
Devolutions Remote Desktop Manager 安全漏洞
Devolutions Remote Desktop Manager is an application from Devolutions Canada. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager PowerShell Module version 2022.3.1.5 and prior versions, which stems from the incorrect deletion...
CVE-2023-1303
A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component System File Management Module. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. Th...
PT-2023-16875 · Ucms · Ucms
Name of the Vulnerable Software and Affected Versions: UCMS version 1.6 Description: A critical issue affects the System File Management Module, specifically the file sadmin/fileedit.php, allowing for unrestricted upload due to the manipulation of the file argument. This can be initiated remotely...
GHSA-QHQ8-2F3M-GXVP SQL Injection in Funadmin
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit...
SQL Injection in Funadmin
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit...
CVE-2023-24782
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit...
Sql injection
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit...
PT-2023-19779 · Funadmin · Funadmin
Name of the Vulnerable Software and Affected Versions: Funadmin version 3.2.0 Description: The issue is a SQL injection vulnerability that can be exploited via the id parameter at the "/databases/database/edit" API endpoint. This allows for potential unauthorized access and manipulation of databa...
CVE-2023-24782
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit...
FunAdmin SQL注入漏洞
FunAdmin is FunAdmin open source based on ThinkPHP6+Layui development of a lightweight high-profile back-end development system . FunAdmin v3.2.0 version there is a security vulnerability , the vulnerability stems from the existence of SQL injection via the /databases/database/edit id parameter...
CVE-2023-24782
CVE-2023-24782 corresponds to a SQL injection vulnerability in Funadmin v3.2.0. The flaw is exploitable via the id parameter on the /databases/database/edit endpoint, allowing unauthorized access/manipulation of database content. The CVSS v3.1 metrics show a CRITICAL base score of 9.8 (Network ac...