16 matches found
EUVD-2022-41599
Malicious code in bioql PyPI...
EUVD-2024-27364
Malicious code in bioql PyPI...
CVE-2024-2412
The disabling function of the user registration page for Heimavista Rpage and Epage is not properly implemented, allowing remote attackers to complete user registration on sites where user registration is supposed to be disabled...
CVE-2024-2412 Heimavista Rpage and Epage - Broken Access Control
The disabling function of the user registration page for Heimavista Rpage and Epage is not properly implemented, allowing remote attackers to complete user registration on sites where user registration is supposed to be disabled...
CVE-2024-2412
The CVE-2024-2412 issue affects Heimavista Rpage and Epage, caused by an improperly implemented “disable registration” function on the user registration page. This allows remote attackers to complete user registrations on sites where registration is supposed to be disabled. Documentation consiste...
CVE-2024-2412 Heimavista Rpage and Epage - Broken Access Control
The disabling function of the user registration page for Heimavista Rpage and Epage is not properly implemented, allowing remote attackers to complete user registration on sites where user registration is supposed to be disabled...
PT-2024-20281 · Unknown · Heimavista Rpage
Name of the Vulnerable Software and Affected Versions: Heimavista Rpage and Epage affected versions not specified Description: The issue concerns the improper implementation of the disabling function for the user registration page, allowing remote attackers to complete user registration on sites...
Heimavista Rpage Access Control Error Vulnerability
Heimavista Rpage is a content management system from the Chinese company Heimavista. An access control error vulnerability exists in Heimavista Rpage, Epage, which stems from the user registration page disable function not being implemented correctly, allowing a remote attacker to complete user...
CVE-2022-39053
Heimavista Rpage has insufficient filtering for platform web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS Reflected Cross-Site Scripting attack...
CVE-2022-39053
Heimavista Rpage has insufficient filtering for platform web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS Reflected Cross-Site Scripting attack...
Cross site scripting
Heimavista Rpage has insufficient filtering for platform web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS Reflected Cross-Site Scripting attack...
CVE-2022-39053 HEIMAVISTA INC. Rpage - Reflected XSS
Heimavista Rpage has insufficient filtering for platform web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS Reflected Cross-Site Scripting attack...
CVE-2022-39053
CVE-2022-39053 affects Heimavista Rpage. The issue is described as insufficient filtering for platform web URLs, allowing an unauthenticated remote attacker to inject JavaScript and perform a reflected XSS. This is supported by multiple sources in the connected set (NVD, CVE Records, CNNVD, etc.)...
CVE-2022-39053 HEIMAVISTA INC. Rpage - Reflected XSS
Heimavista Rpage has insufficient filtering for platform web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS Reflected Cross-Site Scripting attack...
Heimavista Rpage 跨站脚本漏洞
Heimavista Rpage is a content management system from the Chinese company Heimavista. A cross-site scripting vulnerability exists in versions of Heimavista Rpage prior to v5.4.103, which stems from insufficient filtering of the platform's web URLs that allows an unauthenticated, remote attacker to...
PT-2022-24698 · Unknown · Heimavista Rpage
Name of the Vulnerable Software and Affected Versions: Heimavista Rpage affected versions not specified Description: The issue is related to insufficient filtering for platform web URL, allowing an unauthenticated remote attacker to inject JavaScript and perform a Reflected Cross-Site Scripting...