11683 matches found
Code injection
An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell...
CVE-2022-32412
CVE-2022-32412 affects HongCMS v3.0. The issue resides in the "/template/edit" component, described as allowing attackers to get shell access. The available connected sources consistently reference a remote-code-execution/getshell impact via that component, with no publicly disclosed exploit deta...
CVE-2022-32412
An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell...
HongCMS 安全漏洞
HongCMS is an open source lightweight content management system CMS. A security vulnerability exists in HongCMS v3.0, which stems from an issue in the /template/edit component that allows an attacker to obtain a shell...
DRUPAL-CONTRIB-2022-047
This module enables you to create and manage a version of taxonomy based on configuration entities instead of content. This allows the terms, vocabularies, and their structure to be exported, imported, and managed as site configuration. The module doesn't sufficiently check access for the edit an...
DRUPAL-CONTRIB-2022-046
The Lottiefiles Field module enables you to integrate the lottiefiles features into your page. The module does not sufficiently filter user-provided text on output, resulting in a Cross-Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role...
Exploit for CVE-2022-30190
CVE-2022-30190EXPPowerPoint This is exploit of CVE-2022-301...
The vulnerability of the pages.edit.php component in the FlatCore CMS system allows attackers to perform cross-site scripting attacks.
The vulnerability of the pages.edit.php component in the FlatCore CMS content management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
CVE-2022-2213
A vulnerability was found in SourceCodester Library Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/editadmindetails.php?id=admin. The manipulation of the argument Name leads to cross site scripting. The...
Cross site scripting
A vulnerability was found in SourceCodester Library Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/editadmindetails.php?id=admin. The manipulation of the argument Name leads to cross site scripting. The...
Library Management System With QR Code 1.0 Cross Site Scripting Vulnerability
Title: Library Management System with QR code Attendance 1.0 Stored Cross-Site Scripting Author: Ashish Kumar https://www.linkedin.com/in/ashish-kumar-0b65a3184 Vendor: https://www.sourcecodester.com/users/kingbhob02 Software:...
ERPNext 跨站脚本漏洞
ERPNext is an open source enterprise resource planning solution from ERPNext India. A cross-site scripting vulnerability exists in ERPNext versions v12.0.9 through v13.0.3, which stems from a user input that is not properly validated, and can be exploited by an attacker to inject arbitrary code...
CVE-2022-1833
A flaw was found in AMQ Broker Operator 7.9.4 installed via UI using OperatorHub where a low-privilege user that has access to the namespace where the AMQ Operator is deployed has access to clusterwide edit rights by checking the secrets. The service account used for building the Operator gives...
Design/Logic Flaw
A flaw was found in AMQ Broker Operator 7.9.4 installed via UI using OperatorHub where a low-privilege user that has access to the namespace where the AMQ Operator is deployed has access to clusterwide edit rights by checking the secrets. The service account used for building the Operator gives...
CVE-2022-1833
A flaw was found in AMQ Broker Operator 7.9.4 installed via UI using OperatorHub where a low-privilege user that has access to the namespace where the AMQ Operator is deployed has access to clusterwide edit rights by checking the secrets. The service account used for building the Operator gives...
CVE-2022-1833
CVE-2022-1833 affects Red Hat AMQ Broker Operator 7.9.4 installed via UI (OperatorHub). A low-privilege user in the operator namespace can gain cluster-wide edit rights by checking secrets, due to an over-privileged service account used for building the Operator. Exploitation requires an already ...
CVE-2022-31357
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=...
CVE-2022-31356
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=...
