Afian AB FileRun 跨站脚本漏洞

Afian Ab Afian AB FileRun is an extensible file manager from Afian AB Afian Ab, Sweden, that features file sharing, cloud file storage, and more. Afian AB FileRun 2021.03.26 A cross-site scripting vulnerability exists that allows attackers to store cross-site scripts via HTTP X-Forwarded-For...

PT-2021-20943

Name of the Vulnerable Software and Affected Versions: Afian FileRun version 2021.03.26 Description: The issue allows stored XSS via an HTTP X-Forwarded-For header that is mishandled when rendering Activity Logs. Recommendations: For Afian FileRun version 2021.03.26, consider disabling the...

CVE-2021-35503: Improper Neutralization of Input During Web Page Generation

Afian FileRun 2021.03.26 allows stored XSS via an HTTP X-Forwarded-For header that is mishandled when rendering Activity Logs...

PT-2021-16170

Name of the Vulnerable Software and Affected Versions Limit Login Attempts WordPress plugin versions prior to 4.0.50 Description The issue arises from the plugin not escaping IP addresses of attempted logins before outputting them in the reports table. This can be exploited by an attacker...

CVE-2021-24657: Improper Neutralization of Input During Web Page Generation

The Limit Login Attempts WordPress plugin before 4.0.50 does not escape the IP addresses which can be controlled by attacker via headers such as X-Forwarded-For of attempted logins before outputting them in the reports table, leading to an Unauthenticated Stored Cross-Site Scripting issue...

The vulnerability of the index.php implementation of the Wayang CMS allows attackers to carry out cross-site scripting attacks.

The vulnerability of the index.php implementation of the Wayang CMS system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by executing malicious payloads using a specially...

Zoho ManageEngine ADSelfService Plus Access Control Error Vulnerability

ZOHO zoho manageengine adselfservice plus is a web-based end-user password management software from ZOHO. zoho ManageEngine ADSelfService Plus 6103 and earlier versions are vulnerable to an access control error that could be exploited by an attacker via the X The vulnerability can be exploited to...

Cross-site scripting in imgURL

imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header...

GHSA-F2RP-J8HV-G5GX Cross-site scripting in imgURL

imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header...

zoho manageengine adselfservice plus 数据伪造问题漏洞

ZOHO zoho manageengine adselfservice plus is a web-based end-user password management software from ZOHO. zoho ManageEngine ADSelfService Plus 6103 and earlier versions are vulnerable to an access control error that could be exploited by an attacker via the X The vulnerability can be exploited to...

Open Redirection

actionpack is vulnerable to open redirection. A malicious X-Forwarded-Host when used in combination with certain allowed host formats, can cause the Host Authorization middleware to redirect users to a malicious website...

Open Redirect

Overview rails is an opensource MVC web framework. Affected versions of this package are vulnerable to Open Redirect. Specially crafted “X-Forwarded-Host” headers in combination with certain “allowed host” formats can cause the Host Authorization middleware in Action Pack to redirect users to a...

Ruby on Rails 输入验证错误漏洞

Ruby on Rails is a set of open source web application frameworks based on the Ruby language by the American Rails team. Ruby on Rails suffers from an Input Validation Error vulnerability that stems from a flaw found in rubygem-actionpack, which, via a specially crafted X-Forwarded-Host header, in...

CVE-2021-38713

imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header...

CVE-2021-38713

imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header...

CVE-2021-38713

imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header...

CVE-2021-38713

imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header...

CVE-2021-38713

The CVE-2021-38713 entry concerns imgURL 2.31, where a cross-site scripting (XSS) vulnerability can be triggered via the X-Forwarded-For HTTP header. Public references and multiple security trackers (Red Hat, GHSA, OSV, NVD, CNVD, etc.) consistently describe imgURL 2.31 as vulnerable to XSS throu...

PT-2021-22274

Name of the Vulnerable Software and Affected Versions imgURL version 2.31 Description The issue allows for XSS Cross-Site Scripting attacks via the X-Forwarded-For HTTP header. Recommendations For imgURL version 2.31, consider restricting access to the X-Forwarded-For HTTP header to minimize the...

imgurl跨站脚本漏洞

imgurl is a simple, pure graph bed program developed using PHP + SQLite 3. A cross-site scripting vulnerability exists in imgURL version 2.31, which allows attackers to trigger cross-site scripting via the X-Forwarded-For HTTP header...