EUVD-2020-21124

Malware in sbrugna...

CVE-2020-28727

Cross-site scripting XSS exists in SeedDMS 6.0.13 via the folderid parameter to views/bootstrap/class.DropFolderChooser.php...

PT-2021-3930

Name of the Vulnerable Software and Affected Versions Adobe RoboHelp Server versions 2019.0.9 and earlier Description The issue exists due to incorrect restriction of the directory path name with limited access. Exploitation may allow a remote attacker to read arbitrary files using a specially...

CVE-2020-28727

Cross-site scripting XSS exists in SeedDMS 6.0.13 via the folderid parameter to views/bootstrap/class.DropFolderChooser.php...

CVE-2020-28727

Cross-site scripting XSS exists in SeedDMS 6.0.13 via the folderid parameter to views/bootstrap/class.DropFolderChooser.php...

CVE-2020-28727

Cross-site scripting XSS exists in SeedDMS 6.0.13 via the folderid parameter to views/bootstrap/class.DropFolderChooser.php...

CVE-2020-28727

Cross-site scripting XSS exists in SeedDMS 6.0.13 via the folderid parameter to views/bootstrap/class.DropFolderChooser.php...

SeedDMS Cross-Site Scripting Vulnerability

SeedDMS formerly known as LetoDMS and MyDMS is a set of open source document management system based on PHP and MySql . The system is mainly used for storing and sharing documents. A cross-site scripting vulnerability exists in SeedDMS version 6.0.13, which originates from the...

PT-2020-17036

Name of the Vulnerable Software and Affected Versions SeedDMS version 6.0.13 Description Cross-site scripting XSS exists via the folderid parameter to the "views/bootstrap/class.DropFolderChooser.php" file. This issue allows for potential XSS attacks. Recommendations For SeedDMS version 6.0.13,...

CVE-2020-28727: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS exists in SeedDMS 6.0.13 via the folderid parameter to views/bootstrap/class.DropFolderChooser.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in vBulletin 5.1.1 Alpha 9 allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to privatemessage/new/, 2 the folderid parameter to a private message in privatemessage/view, 3 a fragment indicator to /help, or 4 the vie...

PT-2014-5110

Name of the Vulnerable Software and Affected Versions vBulletin version 5.1.1 Alpha 9 Description The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to cross-site scripting XSS attacks. This can be achieved through various means, including the PATH INFO to...

CVE-2014-3135: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in vBulletin 5.1.1 Alpha 9 allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to privatemessage/new/, 2 the folderid parameter to a private message in privatemessage/view, 3 a fragment indicator to /help, or 4 the vie...

CVE-2007-4265

Multiple cross-site scripting XSS vulnerabilities in VisionProject 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 projectIssueId parameter in EditProjectIssue.do, the 2 projectId parameter in ProjectSelected.do, the 3 folderId parameter in...

CVE-2007-4265

Multiple cross-site scripting XSS vulnerabilities in VisionProject 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 projectIssueId parameter in EditProjectIssue.do, the 2 projectId parameter in ProjectSelected.do, the 3 folderId parameter in...

CVE-2006-4952: Undefined Security Weakness

The updatemail servlet in Neon WebMail for Java before 5.08 allows remote attackers to move e-mail messages of arbitrary users between different mail folders, specified by the folderid and tofolderid parameters, via the ID parameter...

CVE-2006-0757

Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary PHP code via 1 the contactgroupid parameter in addressbook.update.php, 2 the messageid parameter in addressbook.add.php, 3 the folderid parameter in folders.update.php, and possibly...

CVE-2005-1327: Undefined Security Weakness

Cross-site scripting XSS vulnerability in pms.php for Woltlab Burning Board 2.3.1 PL2 and earlier allows remote attackers to inject arbitrary web script or HTML via the folderid parameter...

WoltLab Burning Board <= 2.3.1 PL2 - XSS Vulnerability (24.04.05)

WoltLab Burning Board = 2.3.1 PL2 - XSS Vulnerability Vendor: WoltLab URL: http://www.woltlab.de/ Version: = 2.3.1 PL 2 Type: XSS Discovered by R and deluxe89 Description: -------------------------------- The WoltLab Burning Board is a high customisable forum software for every kind of use. See 1...

CVE-2004-1732: Undefined Security Weakness

SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter...