cve-2024-37763

描述 MachForm 版本 19 及以下版本受到未经过身份验证的存储型跨站脚本攻击的影响，这会影响拥有有效会话并可以查看已编译表单结果的用户。 在目标 Web 应用程序中，当使用启用了文本签名的表单时，向易受攻击的资源发出的请求被发现存在 XSS 攻击。位于易受攻击 URL 内 POST 请求正文的一个参数缺少清理，这允许放置恶意有效载荷并在受害者的浏览器上触发 JavaScript 代码。 风险 严重性：中等 CVSS v3.1 评分：5.4 CVSS v3.1 向量：AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L 受影响资源 版本：MachForm v19...

Stochastic Analysis of Cybersecurity Defense Strategies under Single Attack Scenario

This research presents a novel stochastic framework for proactive cybersecurity defense timing under a single attack scenario. The approach models the defense process as a continuous observation mechanism in which the defense instant and the subsequent observation slot follow independent...

CVE-2024-37763

MachForm up to version 19 is affected by an unauthenticated stored cross-site scripting which affects users with valid sessions whom can view compiled forms results...

concrete5 CMS 5.6.1.2 - Multiple Vulnerabilities

No description provided by source. ============================================================= \ \ / / | | / \ / | | \ \ V / | | | | | | | | | / \ | ' \ | | | | | | | | | | | | '| | / / . \ | | | | | | || | | | | | | | | | // \ | ./ || / || || |/ || | | || blackpentesters.blogspot.com...

CVE-1999-1052

Microsoft FrontPage stores form results in a default location in /private/formresults.txt, which is world-readable and accessible in the document root, which allows remote attackers to read possibly sensitive information submitted by other users...

CVE-1999-1052

Microsoft FrontPage stores form results in a default location in /private/formresults.txt, which is world-readable and accessible in the document root, which allows remote attackers to read possibly sensitive information submitted by other users...