EUVD-2007-6093

Malware in sbrugna...

CVE-2024-6108

A vulnerability was found in Genexis Tilgin Home Gateway 322AS0500-03051305. It has been classified as problematic. Affected is an unknown function of the file /vood/cgi-bin/voodview.cgi?act=index⟨=EN of the component Login. The manipulation of the argument errmsg leads to basic cross site...

Genexis Tilgin Home Gateway Security Vulnerability

Genexis Tilgin Home Gateway is a series of home gateways from Genexis, a South Korean company. A security vulnerability exists in Genexis Tilgin Home Gateway version 322AS0500-03051305, which stems from a cross-site scripting vulnerability caused by the parameter errmsg in file...

PT-2024-37385

Name of the Vulnerable Software and Affected Versions: Genexis Tilgin Home Gateway version 322 AS0500-03 05 13 05 Description: A problematic issue has been found, affecting an unknown function of the file /vood/cgi-bin/vood view.cgi?act=index&lang=EN of the component Login. The manipulation of th...

CVE-2024-6108: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability was found in Genexis Tilgin Home Gateway 322AS0500-03051305. It has been classified as problematic. Affected is an unknown function of the file /vood/cgi-bin/voodview.cgi?act=index&lang=EN of the component Login. The manipulation of the argument errmsg leads to basic cross site...

GHSA-HWVW-GH23-QPVQ CA17 TeamsACS Cross Site Scripting vulnerability

Cross Site Scripting vulnerability in CA17 TeamsACS v.1.0.1 allows a remote attacker to execute arbitrary code via a crafted script to the errmsg parameter...

CVE-2024-22780

Cross Site Scripting vulnerability in CA17 TeamsACS v.1.0.1 allows a remote attacker to execute arbitrary code via a crafted script to the errmsg parameter...

CVE-2024-22780

Cross Site Scripting vulnerability in CA17 TeamsACS v.1.0.1 allows a remote attacker to execute arbitrary code via a crafted script to the errmsg parameter...

CVE-2024-22780

Cross Site Scripting vulnerability in CA17 TeamsACS v.1.0.1 allows a remote attacker to execute arbitrary code via a crafted script to the errmsg parameter...

PT-2024-19564

Name of the Vulnerable Software and Affected Versions CA17 TeamsACS version 1.0.1 Description A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via a crafted script to the errmsg parameter. This enables the attacker to perform unauthorized actions on the affected...

CVE-2024-22780: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in CA17 TeamsACS v.1.0.1 allows a remote attacker to execute arbitrary code via a crafted script to the errmsg parameter...

CVE-2024-22780

Cross Site Scripting vulnerability in CA17 TeamsACS v.1.0.1 allows a remote attacker to execute arbitrary code via a crafted script to the errmsg parameter...

CVE-2024-22780

CA17 TeamsACS version v.1.0.1 is vulnerable to a Cross-Site Scripting (XSS) vulnerability due to insufficient input validation in the errmsg parameter. A remote attacker can exploit this by providing a crafted script to execute arbitrary code and perform unauthorized actions on the affected syste...

CVE-2024-22780

Cross Site Scripting vulnerability in CA17 TeamsACS v.1.0.1 allows a remote attacker to execute arbitrary code via a crafted script to the errmsg parameter...

CVE-2019-0303: Improper Neutralization of Input During Web Page Generation

SAP BusinessObjects Business Intelligence Platform Administration Console, versions 4.2, 4.3, module BILogon/appService.jsp is reflecting requested parameter errMsg into response content without sanitation. This could be used by an attacker to build a special url that execute custom JavaScript co...

PT-2019-4582

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform versions 4.2, 4.3 Description The issue exists due to the lack of neutralization of special elements in the BILogon/appService.jsp module. This could allow a remote attacker to execute arbitra...

PT-2012-6261

Name of the Vulnerable Software and Affected Versions Video Lead Form plugin for WordPress affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the errMsg parameter in a "video-lead-form" action t...

CVE-2012-6312: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Video Lead Form plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the errMsg parameter in a video-lead-form action to wp-admin/admin.php...

Cross site scripting

Cross-site scripting XSS vulnerability in wflogin.jsp in Aris Global ARISg 5.0 allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter...

CVE-2010-2130

CVE-2010-2130 describes a Cross-site scripting (XSS) vulnerability in the ARISg 5.0 product, specifically in the wflogin.jsp page, exploitable via the errmsg parameter to inject arbitrary script/HTML. The connected documents confirm the vulnerable component (wflogin.jsp) and parameter but do not ...