GENI Portal 跨站脚本漏洞

GENI Portal is a web tool from GENI for managing geni resource reservations. A cross-site scripting vulnerability exists in GENI Portal, which stems from the fact that incorrect manipulation of the parameter error can lead to cross-site scripting...

PT-2022-9032 · Chris92De · Adminserv

Name of the Vulnerable Software and Affected Versions: Chris92de AdminServ affected versions not specified Description: A vulnerability was found in Chris92de AdminServ, rated as problematic. This issue affects some unknown processing of the file resources/core/adminserv.php. The manipulation of...

AdminServ 跨站脚本漏洞

AdminServ is a WebInterface used by Christopher F., an individual developer, to manage Trackmania Forever and ManiaPlanet dedicated servers. A cross-site scripting vulnerability exists in AdminServ that stems from cross-site scripting due to misuse of the parameter error...

UBUNTU-CVE-2022-0485

A flaw was found in the copying tool nbdcopy of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly treating the completion of an asynchronous command as successful, rather than checking the error parameter. This could result in the silent creation of a...

CVE-2022-30776

atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter...

CVE-2022-30776

atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter...

CVE-2022-30776

atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter...

CVE-2021-24996

The IDPay for Contact Form 7 WordPress plugin through 2.1.2 does not sanitise and escape the idpayerror parameter before outputting it back in the page leading to a Reflected Cross-Site Scripting...

CVE-2021-25035

The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.7 does not sanitise and escape the error parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

Cross site scripting

The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.7 does not sanitise and escape the error parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2021-40260

Multiple Cross Site Scripting XSS vulnerabilities exist in SourceCodester Tailor Management 1.0 via the 1 eid parameter in a partedit.php and b customeredit.php, the 2 id parameter in a editmeasurement.php and b addpayment.php, and the 3 error parameter in index.php...

Cross site scripting

Multiple Cross Site Scripting XSS vulnerabilities exist in SourceCodester Tailor Management 1.0 via the 1 eid parameter in a partedit.php and b customeredit.php, the 2 id parameter in a editmeasurement.php and b addpayment.php, and the 3 error parameter in index.php...

CVE-2021-42566

myfactory.FMS before 7.1-912 allows XSS via the Error parameter...

CVE-2021-42566

myfactory.FMS before 7.1-912 allows XSS via the Error parameter...

CVE-2021-42566

myfactory.FMS before 7.1-912 allows XSS via the Error parameter...

Cross site scripting

myfactory.FMS before 7.1-912 allows XSS via the Error parameter...

CVE-2021-42566

myfactory.FMS before 7.1-912 allows XSS via the Error parameter...

myfactory.FMS 跨站脚本漏洞

myfactory.FMS is a transaction management system. A cross-site scripting vulnerability exists in Myfactory.FMS that stems from the product's Error parameter failing to properly validate user input data. The vulnerability can be exploited to execute client-side code. The following products and...

CVE-2021-34650

The eID Easy WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the error parameter found in the /admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 4.6...

eID Easy < 4.7 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the error parameter found in the /admin.php file which allows attackers to inject arbitrary web scripts...