CVE-2019-20378

ganglia-web aka Ganglia Web Frontend through 3.7.5 allows XSS via the header.php ce parameter...

CVE-2019-20378

ganglia-web aka Ganglia Web Frontend through 3.7.5 allows XSS via the header.php ce parameter...

Cross site scripting

ganglia-web aka Ganglia Web Frontend through 3.7.5 allows XSS via the header.php cs parameter...

UBUNTU-CVE-2019-20378

ganglia-web aka Ganglia Web Frontend through 3.7.5 allows XSS via the header.php ce parameter...

UBUNTU-CVE-2019-20379

ganglia-web aka Ganglia Web Frontend through 3.7.5 allows XSS via the header.php cs parameter...

CVE-2019-20378

ganglia-web aka Ganglia Web Frontend through 3.7.5 allows XSS via the header.php ce parameter...

CVE-2019-20378

ganglia-web aka Ganglia Web Frontend through 3.7.5 allows XSS via the header.php ce parameter...

CVE-2019-20378

CVE-2019-20378 affects ganglia-web (Ganglia Web Frontend) up to version 3.7.5, where an XSS bug is exploitable via the header.php ce parameter. Multiple advisories (OSV, SUSE, Nessus plugins) confirm the issue and show a fixed release sequence (3.7.5‑2.1 and related SUSE security updates) that ad...

CVE-2019-20379

ganglia-web aka Ganglia Web Frontend through 3.7.5 allows XSS via the header.php cs parameter...

Logic flaw vulnerability in ejucms frontend Us***.php file

EJU real estate system ejucms is a set of localized O2O real estate website platform system. There is a logic flaw vulnerability in the ejucms front-end Us.php file. Attackers can use the vulnerability to modify any user information...

SQL Injection Vulnerability in me***.php file of Yunye CMS frontend

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the me.php file in the frontend of Yunye CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

XSS vulnerability in the frontend of Angel School's training website system

Angel school training website system is an open source website management system. Angel School Training Website System has an XSS vulnerability in the front-end that can be exploited by attackers to execute malicious script code...

CVE-2013-6242: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the frontend in Open-Xchange OX AppSuite 6.22.3 before 6.22.3-rev5 and 6.22.4 before 6.22.4-rev12 allows remote attackers to inject arbitrary web script or HTML via the subject of an email. NOTE: the vulnerabilities related to the body of the email and th...

OX App Suite 7.10.2 Cross Site Scripting / Improper Access Control

Product: OX App Suite Vendor: OX Software GmbH Internal reference: 67097 Bug ID Vulnerability type: Cross-site scripting CWE-80 Vulnerable version: 7.10.2 and earlier Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.10.2-rev14,...

MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 - Information Disclosure

MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 - Information Disclosure Exploit: MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 - Information Disclosure Date: 2019-12-30 Author: LiquidWorm Vendor: Emmanuel Product web page: https://github.com/empierre/MyDomoAtHome...

Arbitrary file download vulnerability in Myucms frontend

MyuCMS open source content management system developed using ThinkPHP community mall. MyuCMS front-end arbitrary file download vulnerability , an attacker can exploit the vulnerability to download any file...

SQL injection vulnerability in the frontend fl***.php file of Dascommerce B2B2C multi-user mall system

Shanghai Shangchuang Network Technology Co., Ltd. is an independent e-commerce service and technology provider with development strength. A SQL injection vulnerability exists in the fl.php file of the B2B2C multi-user mall system. An attacker can use the vulnerability to obtain sensitive...

File Upload Vulnerability in ezEIP Frontend of Wando Network Technology Co.

ezEIP is a website management system of Wando Network Technology Co. A file upload vulnerability exists in the frontend of ezEIP of Wando Network Technology Co. Ltd, which can be exploited by an attacker to gain server administrator privileges...

mijnlijstenmakerij.nl Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1048800 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

[SECURITY] Fedora 31 Update: cacti-1.2.8-1.fc31

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...