PT-2019-7861

Name of the Vulnerable Software and Affected Versions haml versions prior to 5.0.0.beta.2 Description The issue arises when user input is used to perform tasks on the server, and certain characters like , ", and ' are not properly escaped. Specifically, the ' character was missed, allowing an...

Cross-site Scripting (XSS)

airflow is vulnerable to cross-site scripting XSS attacks. These attacks are possible through the variable view, when the variable template doesn't exist. When this happens, the input is returned to the user without being escaped...

Gekko CMS (SQL Injection) Vulnerability

No description provided by source. 2-SQL injection Vulnerability Description: SQL injection is a code injection technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for strin...