CVE-2023-1316: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository osticket/osticket prior to v1.16.6...

CVE-2023-1251

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Akinsoft Wolvox. This issue affects Wolvox: before 8.02.03...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Akinsoft Wolvox. This issue affects Wolvox: before 8.02.03...

Ulkem PtteM Kart SQL注入漏洞

Ulkem PtteM Kart is an application from Ulkem Turkey. A security vulnerability exists in Ulkem PtteM Kart versions prior to 2.1, which stems from improper neutralization of special elements, leading to SQL injection...

Design/Logic Flaw

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in UBIT Information Technologies Student Information Management System.This issue affects Student Information Management System: before 20211126...

Mia-Med SQL注入漏洞

Mia-Med is a digital hospital system. A security vulnerability exists in Mia Technology Mia-Med prior to version 1.0.0.58 that stems from an improper neutralization of the particular element used and a SQL injection vulnerability...

CVE-2021-44196: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in UBIT Information Technologies Student Information Management System. This issue affects Student Information Management System: before 20211126...

CVE-2021-36399: Improper Neutralization of Input During Web Page Generation

In Moodle, ID numbers displayed in the quiz override screens required additional sanitizing to prevent a stored XSS risk...

The vulnerability in the web interface for operating systems ArubaOS exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. This allows attackers to execute arbitrary commands.

The vulnerability in the web interface for operating systems ArubaOS exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2023-1211: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2...

CVE-2021-4329: Improper Neutralization of Special Elements used in a Command

A vulnerability, which was classified as critical, has been found in json-logic-js 2.0.0. Affected by this issue is some unknown functionality of the file logic.js. The manipulation leads to command injection. Upgrading to version 2.0.1 is able to address this issue. The patch is identified as...

CVE-2023-20104: Improper Neutralization of Input During Web Page Generation

A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

Improper Neutralization of Equivalent Special Elements

Overview Affected versions of this package are vulnerable to Improper Neutralization of Equivalent Special Elements due to improper user input validation, which allows HTML injection in the forms/Address page fields. Remediation Upgrade BTCPayServer.Client to version 1.7.3 or higher. References -...

BTCPay Server 安全漏洞

BTCPay Server is a self-hosted open source cryptocurrency payment processor. It is secure, private, uncensored and free. A security vulnerability exists in BTCPay Server versions prior to 1.8.0, which stems from improper neutralization of special elements...

CVE-2023-1149 Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver

Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.8.0...

CVE-2023-1149: Improper Neutralization of Equivalent Special Elements

Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.8.0...

CVE-2021-3855

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Liman Central Management System Liman MYS HTTP/Controllers, CronMail, Jobs modules allows Command Injection. This issue affects Liman Central Management System: from 1.7.0 before 1.8.3-462...

CVE-2023-27294

Improper neutralization of input during web page generation allows an authenticated attacker with access to a restricted account to submit malicious Javascript as the description for a calendar event, which would then be executed in other users' browsers if they browse to that event. This could...

NTN Information Technologies Online Services Software SQL注入漏洞

NTN Information Technologies Online Services Software is an online services software from NTN Information Technologies. A security vulnerability exists in NTN Information Technologies Online Services Software prior to version 1.17 that stems from improper neutralization of special elements, which...

Improper Neutralization of Input in paperWidth param During Web Page Generation

Module : print and invoice-print Parameter : paperWidth Attacker would be able to close the tag and can inject html tags POC : http://demo.bumsys.org/print?&paperWidth=;%3C/style%3E%3Cbody+onpageshow=alertdocument.domain%3E POC :...