1215 matches found
CVE-2021-37293
A Directory Traversal vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 via the page GET parameter in index.php...
mruby 缓冲区错误漏洞
mruby is a lightweight implementation of the Ruby language. mruby/mruby versions prior to GitHub repository mruby/mruby 3.2 are vulnerable to a buffer error that stems from out-of-range reads of the mrbget parameter. An attacker could exploit this vulnerability to execute arbitrary code...
CVE-2022-28364
Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability XSS in the /goform/rlmswitchrprocess file parameter via GET. Authentication is required...
Cross site scripting
Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability XSS in the /goform/rlmswitchrprocess file parameter via GET. Authentication is required...
Cross site scripting
Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability XSS in the /goform/loginprocess username parameter via GET. No authentication is required...
CVE-2022-28363
Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability XSS in the /goform/loginprocess username parameter via GET. No authentication is required...
PT-2022-18972 · Reprise · Reprise License Manager
Name of the Vulnerable Software and Affected Versions: Reprise License Manager version 14.2 Description: The issue is a reflected cross-site scripting vulnerability XSS in the "/goform/login process" API endpoint, specifically in the username parameter via GET requests. No authentication is...
CVE-2021-43432
A Cross Site Scripting XSS vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp...
CVE-2021-43432
A Cross Site Scripting XSS vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp...
Cross site scripting
A Cross Site Scripting XSS vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp...
CVE-2021-43432
A Cross Site Scripting XSS vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp...
PT-2022-11836 · Unknown · Exrick Xmall Admin Panel
Name of the Vulnerable Software and Affected Versions: Exrick XMall Admin Panel affected versions not specified Description: A Cross Site Scripting XSS issue exists in the Exrick XMall Admin Panel, specifically via the GET parameter in the product-add.jsp page. This allows for potential malicious...
Multiple Open redirect
Description There exist multiple open redirect in the get parameter returnurl . I found it in bookmarks//edit , bookmarks//remove, bookmarks//archive, bookmarks//unarchive, bookmarks/bulkedit Proof of Concept 1. Login in the demo instance https://demo.linkding.link/ 2. Go to...
Cross site scripting
An issue was discovered in Veritas InfoScale Operations Manager VIOM before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch 100. A reflected cross-site scripting XSS vulnerability in admin/cgi-bin/listdir.pl allows authenticated remote administrators to inject arbitrary web script or HTML into an HTTP...
Cross-site Scripting (XSS) - Reflected
Description The user-controlled GET domain parameter in index.php is unsanitized resulting in Reflected Cross-Site Scripting. Proof of Concept Endpoint: GET https://HOST/edit/web/ // File: /web/edit/web/index.phpL28 // List domain $vdomain = $GET'domain'; // User controllable parameter if...
QuickBox 操作系统命令注入漏洞
QuickBox is a media server application and service management system from the QuickBox team. A code injection vulnerability exists in QuickBox Pro v2.5.8 and below due to a variable in the config.php file that accepts a GET parameter value and parses it as shellexec and fails to properly clean up...
CVE-2021-33848
Fresenius Kabi Vigilant Software Suite Mastermed Dashboard version 2.0.1.3 is vulnerable to reflected cross-site scripting attacks. An attacker could inject JavaScript in a GET parameter of HTTP requests and perform unauthorized actions such as stealing internal information and performing actions...
CVE-2021-45422
Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activateprocess "count" parameter via GET. No authentication is required...
Cross site scripting
Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activateprocess "count" parameter via GET. No authentication is required...