Lucene search
+L

422 matches found

attackerkb
attackerkb
•added 2022/01/20 6:15 p.m.•12 views

CVE-2021-44091

A Cross-Site Scripting XSS vulnerability exists in Courcecodester Multi Restaurant Table Reservation System 1.0 in register.php via the 1 fullname, 2 phone, and 3 address parameters...

5.4CVSS6AI score0.00616EPSS
SaveExploits1References3
CVE
CVE
•added 2022/01/20 5:20 p.m.•54 views

CVE-2021-44091

CVE-2021-44091 targets SourceCodester/ Courcecodester Multi Restaurant Table Reservation System 1.0. The XSS vulnerability occurs in register.php via the fullname, phone and address parameters, allowing injection of client-side code. Public documentation from multiple sources (CNVD/CNNVD, NVD/CVE...

5.4CVSS5.2AI score0.00616EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/01/20 5:20 p.m.•36 views

CVE-2021-44091

A Cross-Site Scripting XSS vulnerability exists in Courcecodester Multi Restaurant Table Reservation System 1.0 in register.php via the 1 fullname, 2 phone, and 3 address parameters...

5.5AI score0.00616EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/20 12:00 a.m.•6 views

CVE-2021-44091: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability exists in Courcecodester Multi Restaurant Table Reservation System 1.0 in register.php via the 1 fullname, 2 phone, and 3 address parameters...

5.4CVSS5.8AI score0.00616EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/01/20 12:00 a.m.•14 views

SourceCodester Multi Restaurant Table Reservation System 跨站脚本漏洞

SourceCodester Multi Restaurant Table Reservation System is a multi-restaurant table reservation system. A cross-site scripting vulnerability exists in Sourcecodester Multi Restaurant Table Reservation System v1.0. The vulnerability is caused by the fullname, phone, address parameters in the...

5.4CVSS5.3AI score0.00616EPSS
SaveExploits1References3
OSV
OSV
•added 2021/12/16 6:15 p.m.•14 views

CVE-2021-41962

Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Owner fullname parameter in a Send Service Request in vehicleservice...

4.8CVSS5.8AI score0.006EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/12/16 6:15 p.m.•12 views

CVE-2021-41962

Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Owner fullname parameter in a Send Service Request in vehicleservice...

4.8CVSS5.8AI score0.006EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/12/16 5:43 p.m.•36 views

CVE-2021-41962

Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Owner fullname parameter in a Send Service Request in vehicleservice...

5.2AI score0.006EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/16 12:00 a.m.•4 views

CVE-2021-41962: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Owner fullname parameter in a Send Service Request in vehicleservice...

4.8CVSS5.8AI score0.006EPSS
SaveExploits1References2
Veracode
Veracode
•added 2021/05/25 2:35 a.m.•27 views

Cross-Site Scripting (XSS)

plone is vulnerable to cross-site scripting. The package fails to sanitize the user fullname field allowing attackers to execute arbitrary JavaScript in a victim's browser...

5.4CVSS4.9AI score0.00666EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2021/05/24 12:00 a.m.•13 views

Plone cross-site scripting vulnerability (CNVD-2021-37195)

Plone is an open source content management system CMS built on the Zope application server. A cross-site scripting vulnerability exists in Plone versions prior to 5.2.4. The vulnerability can be exploited to cause cross-site scripting with the help of "fullname"...

5.4CVSS5.9AI score0.00631EPSS
SaveExploits0References1
Veracode
Veracode
•added 2021/05/21 4:32 a.m.•20 views

Cross-Site Scripting (XSS)

plone is vulnerable to cross-site scripting. An attacker is able to exploit the vulnerability by injecting script via the user fullname property and file upload functionality...

5.4CVSS2.4AI score0.00978EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2021/05/21 12:00 a.m.•14 views

Plone 跨站脚本漏洞

Plone is an open source content management system CMS built on the Zope application server. A cross-site scripting vulnerability exists in Plone versions prior to 5.2.4. The vulnerability can be exploited to cause cross-site scripting with the help of "fullname"...

5.4CVSS5.3AI score0.00631EPSS
SaveExploits0References3
PyPA
PyPA
•added 2021/05/20 4:15 p.m.•11 views

PYSEC-2021-78

Plone CMS until version 5.2.4 has a stored Cross-Site Scripting XSS vulnerability in the user fullname property and the file upload functionality. The user's input data is not properly encoded when being echoed back to the user. This data can be interpreted as executable code by the browser and...

5.4CVSS5.7AI score0.00978EPSS
SaveExploits1References5Affected Software1
attackerkb
attackerkb
•added 2021/05/20 4:15 p.m.•10 views

CVE-2021-3313

Plone CMS until version 5.2.4 has a stored Cross-Site Scripting XSS vulnerability in the user fullname property and the file upload functionality. The user's input data is not properly encoded when being echoed back to the user. This data can be interpreted as executable code by the browser and...

5.4CVSS6.1AI score0.00978EPSS
SaveExploits1References5
CVE
CVE
•added 2021/05/20 3:34 p.m.•93 views

CVE-2021-3313

Plone CMS affected: versions up to and including 5.2.4. The issue is a stored XSS in the user fullname attribute and file upload handling, caused by input not being properly encoded when echoed back. Impact is that an attacker can inject JavaScript that executes in the victim’s browser when inter...

5.4CVSS5.3AI score0.00978EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/20 12:00 a.m.•6 views

CVE-2021-3313: Improper Neutralization of Input During Web Page Generation

Plone CMS until version 5.2.4 has a stored Cross-Site Scripting XSS vulnerability in the user fullname property and the file upload functionality. The user's input data is not properly encoded when being echoed back to the user. This data can be interpreted as executable code by the browser and...

5.4CVSS6AI score0.00978EPSS
SaveExploits1References2
OSV
OSV
•added 2020/09/09 2:15 p.m.•10 views

CVE-2020-24194

A Cross-site scripting XSS vulnerability in 'user-profile.php' in SourceCodester Daily Tracker System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'fullname' parameter...

6.1CVSS6.5AI score0.00829EPSS
SaveExploits1References2
NVD
NVD
•added 2020/09/09 2:15 p.m.•23 views

CVE-2020-24194

A Cross-site scripting XSS vulnerability in 'user-profile.php' in SourceCodester Daily Tracker System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'fullname' parameter...

6.1CVSS0.00829EPSS
SaveExploits1References1
Prion
Prion
•added 2020/09/09 2:15 p.m.•24 views

Cross site scripting

A Cross-site scripting XSS vulnerability in 'user-profile.php' in SourceCodester Daily Tracker System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'fullname' parameter...

4.3CVSS6AI score0.00829EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder