67 matches found
PT-2021-23023
Name of the Vulnerable Software and Affected Versions spotweb versions 1.5.1 and below Description The issue is a cross-site scripting XSS vulnerability in the templates/installer/step-004.inc.php file. This allows remote attackers to inject arbitrary web script or HTML via the firstname paramete...
CVE-2021-40970: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the username parameter...
PT-2021-23025
Name of the Vulnerable Software and Affected Versions spotweb versions 1.5.1 and below Description The issue is a cross-site scripting XSS vulnerability in the templates/installer/step-004.inc.php file. This allows remote attackers to inject arbitrary web script or HTML via the username parameter...
CVE-2021-40968: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter...
CVE-2021-40972: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the mail parameter...
PT-2021-23022
Name of the Vulnerable Software and Affected Versions spotweb versions 1.5.1 and below Description The issue allows remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter in the templates/installer/step-004.inc.php file. This enables cross-site scripting XSS attack...
PT-2021-23026
Name of the Vulnerable Software and Affected Versions spotweb versions 1.5.1 and below Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the newpassword1 parameter in the...
CVE-2021-40969: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the firstname parameter...
CVE-2021-40971: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword1 parameter...
CVE-2021-40973: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the lastname parameter...
PT-2021-23027
Name of the Vulnerable Software and Affected Versions spotweb versions 1.5.1 and below Description The issue is a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML. This is achieved via the mail parameter in the...
PT-2021-23028
Name of the Vulnerable Software and Affected Versions spotweb versions 1.5.1 and below Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the lastname parameter in the...
Directory traversal
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to the fact that there is an unrestricted possibility of loading any file with an inc.php extension. Inclusion of other files even though...
PT-2020-15972
Name of the Vulnerable Software and Affected Versions Observium Professional, Enterprise & Community version 20.8.10631 Description The issue allows for directory traversal and local file inclusion due to the unrestricted possibility of loading any file with an inc.php extension. This can lead to...
PT-2020-15980
Name of the Vulnerable Software and Affected Versions Observium Professional, Enterprise & Community version 20.8.10631 Description An issue in the software allows for directory traversal and local file inclusion due to unrestricted file loading with an inc.php extension. This can lead to Remote...
PT-2020-15970
Name of the Vulnerable Software and Affected Versions Observium Professional, Enterprise & Community version 20.8.10631 Description An issue in the software allows for directory traversal and local file inclusion due to unrestricted file loading with an inc.php extension. This can lead to Remote...
CVE-2016-10984
The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter...
CVE-2016-10984
The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter...
