EUVD-2021-26649

Malware in sbrugna...

DzzOffice Cross-Site Scripting Vulnerability

Dzzoffice is a set of open source office suite for enterprises, teams to build their own similar to the "Google Apps Suite", "Microsoft Office365" enterprise collaboration platform. A cross-site scripting vulnerability exists in attach/ajax.php in DzzOffice 2.02.1 and earlier versions. The...

CVE-2021-3318

attach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter...

CVE-2021-3318

attach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter...

DzzOffice cross-site scripting vulnerabilities

Dzzoffice is a set of open source office suite for enterprises, teams to build their own similar to the "Google Apps Suite", "Microsoft Office365" enterprise collaboration platform. A cross-site scripting vulnerability exists in attach/ajax.php in DzzOffice 2.02.1 and earlier versions. The...

PT-2021-20063

Name of the Vulnerable Software and Affected Versions DzzOffice versions 2.02.1 and earlier Description The issue allows for XSS via the editorid parameter in the "attach/ajax.php" endpoint. Recommendations For DzzOffice versions 2.02.1 and earlier, as a temporary workaround, consider restricting...

CVE-2021-3318: Improper Neutralization of Input During Web Page Generation

attach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter...

CVE-2007-2963

Multiple cross-site scripting XSS vulnerabilities in Invision Power Board IPB or IP.Board 2.2.2, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via 1 modulebbcodeloader.php, 2 modulediv.php, 3 moduleemail.php, 4 moduleimage.php, 5 modulelink.php, or 6 the...

CVE-2007-2963: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Invision Power Board IPB or IP.Board 2.2.2, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via 1 modulebbcodeloader.php, 2 modulediv.php, 3 moduleemail.php, 4 moduleimage.php, 5 modulelink.php, or 6 the...

Link Exchange Lite SQL 注入漏洞

Link Exchange Lite是一款基于ASP的WEB应用程序。 Link Exchange Lite不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行sql注入攻击，获得敏感信息。 问题是由于'categories.asp'脚本对用户提交的WEB参数缺少过滤，提交恶意sql查询作为参数数据，可更改原来的sql逻辑，获得敏感信息。 Softacid Link Exchange Lite 1.0 http://softacid.net/ http://www.example.com/categories.asp?catID=SQL Injection...

CVE-2006-6080

Multiple SQL injection vulnerabilities in categories.asp in gNews Publisher allow remote attackers to execute arbitrary SQL commands via the 1 catID or 2 editorID parameter...

CVE-2006-6080

Multiple SQL injection vulnerabilities in categories.asp in gNews Publisher allow remote attackers to execute arbitrary SQL commands via the 1 catID or 2 editorID parameter...

CVE-2006-6080: Undefined Security Weakness

Multiple SQL injection vulnerabilities in categories.asp in gNews Publisher allow remote attackers to execute arbitrary SQL commands via the 1 catID or 2 editorID parameter...