52 matches found
Haraj 3.7 - Cross-Site Scripting
Haraj 3.7 contains a cross-site scripting vulnerability in the User Upgrade Form. An attacker can inject malicious script and thus steal authentication credentials and launch other attacks. id: CVE-2022-31299 info: name: Haraj 3.7 - Cross-Site Scripting author: edoardottt severity: medium...
CVE-2022-31298
CVE-2022-31298 Haraj Script 3.7 - XSS Armazenado Autenticado Título do Exploit: Haraj Script 3.7 - XSS Armazenado Autenticado Data: 2022-06-13 CVE: CVE-2022-31298 Autor do Exploit: Abdulaziz Saad @b4zb0z Homepage do Fornecedor: https://angtech.org/ Link do Software:...
CVE-2022-31297
CVE-2022-31297 Haraj Script 3.7 - Reflected XSS शोषण शीर्षक: Haraj Script 3.7 - Reflected XSS तारीख: 2022-06-13 CVE: CVE-2022-31297 शोषण लेखक: Abdulaziz Saad @b4zb0z विक्रेता होमपेज: https://angtech.org/ सॉफ्टवेयर लिंक: https://angtech.org/product/view/3...
CVE-2022-31299
CVE-2022-31299 Haraj Script 3.7 - Reflektiertes XSS Exploit-Titel: Haraj Script 3.7 - Reflektiertes XSS Datum: 2022-06-13 CVE: CVE-2022-31299 Exploit-Autor: Abdulaziz Saad @b4zb0z Anbieter-Startseite: https://angtech.org/ Software-Link: https://angtech.org/product/view/3 Version: 3.7...
CVE-2022-31301
CVE-2022-31301 Haraj Script 3.7 - Post-Anzeigen: Authentifiziertes gespeichertes XSS Exploit-Titel: Haraj Script 3.7 - Authentifiziertes gespeichertes XSS Datum: 2022-06-13 CVE: CVE-2022-31301 Exploit-Autor: Abdulaziz Saad @b4zb0z Anbieter-Startseite: https://angtech.org/ Software-Link:...
CVE-2022-31300
CVE-2022-31300 Haraj Script 3.7 - Sezione DM XSS Memorizzato Autenticato Titolo Exploit: Haraj Script 3.7 - XSS Memorizzato Autenticato Data: 2022-06-13 CVE: CVE-2022-31300 Autore Exploit: Abdulaziz Saad @b4zb0z Homepage del Venditore: https://angtech.org/ Link del Software:...
CVE-2022-31300
A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...
CVE-2022-31298
A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...
CVE-2022-31301
Haraj v3.7 was discovered to contain a stored cross-site scripting XSS vulnerability in the Post Ads component...
CVE-2022-31299
Haraj v3.7 was discovered to contain a reflected cross-site scripting XSS vulnerability in the User Upgrade Form...
EUVD-2022-52856
Malicious code in bioql PyPI...
EUVD-2022-52855
Malicious code in bioql PyPI...
EUVD-2022-52853
Malicious code in bioql PyPI...
haraj 1.1 Add Administrator
==================================================================================================================================== | Title : haraj V1.1 Add ADmin Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 63.0.3 32-bit | | Vendor :...
haraj-alkharj.com.sa Cross Site Scripting vulnerability OBB-3097590
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Haraj Cross-Site Scripting Vulnerability
A security vulnerability exists in Haraj v3.7, a buying and selling platform from Haraj Saudi Arabia, due to a cross-site scripting issue in the comments section of advertisements. An attacker could exploit the vulnerability to execute arbitrary Web script or HTML via a crafted POST request...
Haraj Cross-Site Scripting Vulnerability (CNVD-2022-66491)
A cross-site scripting vulnerability exists in Haraj v3.7, a buying and selling platform from Haraj Saudi Arabia. The vulnerability stems from a stored cross-site scripting XSS vulnerability contained in the Post Ads component. An attacker could exploit this vulnerability to conduct cross-site...
Haraj has cross-site scripting vulnerability
A cross-site scripting vulnerability exists in Haraj v3.7, a buying and selling platform from Haraj Saudi Arabia. The vulnerability stems from a lack of data validation filtering of user-supplied data and output in some DM components. An attacker could exploit this vulnerability to execute...
