32 matches found
CVE-2020-9461
CVE-2020-9461 ██╗ ██╗███████╗███████╗ ╚██╗██╔╝██╔════╝██╔════╝ ╚███╔╝ ███████╗███████╗ ██╔██╗ ╚════██║╚════██║ ██╔╝ ██╗███████║███████║ ╚═╝ ╚═╝╚══════╝╚══════╝ 저장형 XSS - Oempro Octech Oempro 4.7부터 4.11까지는 인증된 사용자에 의한 저장형 XSS를 허용합니다. Media.CreateFolder 명령의 FolderName 매개변수가 취약합니다. 명령:...
CVE-2023-2859
CVE-2023-2859: TeamPass 3.0.9에서 관리자Admin에게 영향을 주는 folderName의 저장형 HTML 주입 - M Nadeem Qazi 안녕하세요, nilsteampassnet/teampass 애플리케이션에서 FolderName 필드에 영향을 미치는 저장형 HTML 주입stored HTML injection이라는 주요 취약점을 발견했습니다. FolderName 필드에 악성 HTML 코드를 삽입함으로써 공격자는 폴더 이름을 변경할 수 있습니다. 취약점 세부 정보 취약점 유형: 저장형 HTML 주입 CVE...
EUVD-2020-30280
Malware in sbrugna...
The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform directory enumeration or cause a Denial of Service (DoS) via a crafted input.
...
CVE-2020-9461
Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName parameter of the Media.CreateFolder command is vulnerable...
CVE-2025-28142
Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V31.0.15 was discovered to contain a command injection vulnerability via the foldername in /boafrm/formDiskCreateShare...
CVE-2025-28142
Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V31.0.15 was discovered to contain a command injection vulnerability via the foldername in /boafrm/formDiskCreateShare...
Edimax BR-6478AC 安全漏洞
Edimax BR-6478AC is a dual-band Gigabit router from China Xunzhou Edimax. A security vulnerability exists in Edimax BR-6478AC V31.0.15, which originates from a command injection of the foldername parameter in /boafrm/formDiskCreateShare...
CVE-2025-28142: Improper Neutralization of Special Elements used in a Command
Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V31.0.15 was discovered to contain a command injection vulnerability via the foldername in /boafrm/formDiskCreateShare...
CVE-2025-1892: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in shishuocms 1.1. It has been classified as problematic. Affected is an unknown function of the file /manage/folder/add.json of the component Directory Deletion Page. The manipulation of the argument folderName leads to cross site scripting. It is possible to launch the...
Webmin Usermin Cross-Site Scripting Vulnerability
Webmin Usermin is a web-based interface from Webmin Inc. It is used for webmail, password change, mail filters, fetchmail, and more. A cross-site scripting vulnerability exists in Webmin Usermin version 2.000. A remote attacker can use this vulnerability to inject arbitrary web script or HTML via...
Stored XSS on FolderName Affecting other users and admin.
Description If two users have same folder permission, malicious users can rename the folder with XSS payload, which will affect the other user, and admin. Payload: "img src=x onerror=alert1 Proof of Concept https://drive.google.com/file/d/1ukzcFocVAnd8WKEEo7-zE4iEMVLKUnXt/view...
CVE-2022-31321
The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform directory enumeration or cause a Denial of Service DoS via a crafted input...
CVE-2022-31321
The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform directory enumeration or cause a Denial of Service DoS via a crafted input...
CVE-2022-31321: Improper Input Validation
The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform directory enumeration or cause a Denial of Service DoS via a crafted input...
CVE-2020-14988: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Bloomreach Experience Manager brXM 4.1.0 through 14.2.2. It allows XSS in the login page via the loginmessage parameter, the text editor via the src attribute of HTML elements, the translations menu via the foldername parameter, the author page via the link URL, or the...
CVE-2020-15427
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxdiskusage.php. When parsing the folderName parameter, the process...
PT-2020-14425 · Centos · Centos Web Panel
Name of the Vulnerable Software and Affected Versions: CentOS Web Panel version cwp-e17.0.9.8.923 Description: This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the ajax dis...
Octech Oempro Cross-Site Scripting Vulnerability
Octech Oempro is a suite of email marketing software from Octech USA. A cross-site scripting vulnerability exists in the 'FolderName' parameter of the Media.CreateFolder command in Octech Oempro versions 4.7 through 4.11. The vulnerability stems from a lack of proper validation of client data by...
