CVE-2025-56762

설명: 애플리케이션은 오류 발생 시 사용 사례에 따라 해당 오류 코드를 웹 애플리케이션에 다시 제공하기 위해 “error.php”를 사용합니다. 소스 코드를 검사한 결과, 애플리케이션이 악성 JavaScript 코드를 생성할 때 “code” 매개변수를 필터링하지 않아 실행이 발생하는 것을 확인했습니다. CVSS v3.1 점수: 5.4 CVSS 참조 링크: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N 기술적 영향: 이 취약점을 성공적으로 악용하면 사용자의 브라우저에서 악성 스크립트가 실행될 수...

EUVD-2007-3164

Malware in sbrugna...

EUVD-2014-2076

Malware in sbrugna...

EUVD-2015-5953

Malware in sbrugna...

EUVD-2019-5656

Malware in sbrugna...

EUVD-2008-5296

Malware in sbrugna...

EUVD-2004-1823

Malware in sbrugna...

EUVD-2018-10899

Malware in sbrugna...

EUVD-2008-6407

Malware in sbrugna...

EUVD-2008-4867

Malware in sbrugna...

EUVD-2010-2365

Malware in sbrugna...

EUVD-2018-19488

Malware in sbrugna...

EUVD-2025-30246

Malicious code in bioql PyPI...

CVE-2025-56762

Paracrawl KeOPs v2 is vulnerable to Cross Site Scripting XSS in error.php...

KEOPS 安全漏洞

KEOPS is a ParaCrawl open source tool for evaluating parallel sentences. A security vulnerability exists in KEOPS version v2, which stems from error.php being vulnerable to cross-site scripting attacks...

CVE-2025-56762

Paracrawl KeOPs v2 is vulnerable to Cross Site Scripting XSS in error.php...

CVE-2025-56762

Paracrawl KeOPs v2 is vulnerable to Cross Site Scripting XSS in error.php...

CVE-2025-56762: Improper Neutralization of Input During Web Page Generation

Paracrawl KeOPs v2 is vulnerable to Cross Site Scripting XSS in error.php...

SUSE CVE-2006-5718

Cross-site scripting XSS vulnerability in error.php in phpMyAdmin 2.6.4 through 2.9.0.2 allows remote attackers to inject arbitrary web script or HTML via UTF-7 or US-ASCII encoded characters, which are injected into an error message, as demonstrated by a request with a utf7 charset parameter...

Cross site scripting

Cross-site Scripting XSS in UebiMiau 2.7.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the "selectedtheme" parameter in error.php...