8 matches found
CVE-2023-48715
Tuleap is an open source suite to improve management of software developments and collaboration. Prior to version 15.2.99.103 of Tuleap Community Edition and prior to versions 15.2-4 and 15.1-8 of Tuleap Enterprise Edition, the name of the releases are not properly escaped on the edition page of ...
CVE-2023-48715
Tuleap is an open source suite to improve management of software developments and collaboration. Prior to version 15.2.99.103 of Tuleap Community Edition and prior to versions 15.2-4 and 15.1-8 of Tuleap Enterprise Edition, the name of the releases are not properly escaped on the edition page of ...
CVE-2023-48715: Improper Neutralization of Input During Web Page Generation
Tuleap is an open source suite to improve management of software developments and collaboration. Prior to version 15.2.99.103 of Tuleap Community Edition and prior to versions 15.2-4 and 15.1-8 of Tuleap Enterprise Edition, the name of the releases are not properly escaped on the edition page of ...
CVE-2020-15160
PrestaShop from version 1.7.5.0 and before version 1.7.6.8 is vulnerable to a blind SQL Injection attack in the Catalog Product edition page with location parameter. The problem is fixed in 1.7.6.8...
CVE-2020-15160: Improper Neutralization of Special Elements used in an SQL Command
PrestaShop from version 1.7.5.0 and before version 1.7.6.8 is vulnerable to a blind SQL Injection attack in the Catalog Product edition page with location parameter. The problem is fixed in 1.7.6.8...
PT-2020-14236
Name of the Vulnerable Software and Affected Versions PrestaShop versions 1.7.5.0 through 1.7.6.7 Description The issue concerns a blind SQL Injection attack in the Catalog Product edition page, specifically with the location parameter. This allows for unauthorized access to database information...
CVE-2018-11348: Improper Neutralization of Input During Web Page Generation
Two XSS vulnerabilities are located in the profile edition page of the user panel of the YunoHost 2.7.2 through 2.7.14 web application. By injecting a JavaScript payload, these flaws could be used to manipulate a user's session...
PT-2018-10506
Name of the Vulnerable Software and Affected Versions YunoHost versions 2.7.2 through 2.7.14 Description The issue is related to two XSS vulnerabilities found in the profile edition page of the user panel of the YunoHost web application. These flaws can be exploited by injecting a JavaScript...