13402 matches found
CVE-2020-20977
A stored cross site scripting XSS vulnerability in index.php/legend/6.html of UK CMS v1.1.10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Comments section...
CVE-2021-31731: Improper Limitation of a Pathname to a Restricted Directory
A directory traversal issue in KiteCMS 1.1.1 allows remote administrators to overwrite arbitrary files via ../ in the path parameter to index.php/admin/Template/fileedit, with PHP code in the html parameter...
CVE-2020-20977: Improper Neutralization of Input During Web Page Generation
A stored cross site scripting XSS vulnerability in index.php/legend/6.html of UK CMS v1.1.10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Comments section...
CVE-2021-37389
CVE-2021-37389 affects Chamilo 1.11.14. The vulnerability is a stored XSS in the installer paths main/install/index.php and main/install/ajax.php via the port parameter. The connected documents consistently describe this CVE as a stored XSS issue in Chamilo LMS and do not provide exploitation det...
CVE-2021-37389
Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter...
CVE-2021-37389: Improper Neutralization of Input During Web Page Generation
Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter...
PT-2021-21629
Name of the Vulnerable Software and Affected Versions Chamilo version 1.11.14 Description The issue allows stored XSS via "main/install/index.php" and "main/install/ajax.php" through the port parameter. Recommendations For Chamilo version 1.11.14, as a temporary workaround, consider restricting...
CVE-2021-38149
index.php/admin/adduser in Chikitsa Patient Management System 2.0.0 allows XSS...
Cross site scripting
index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS...
Cross site scripting
index.php/admin/adduser in Chikitsa Patient Management System 2.0.0 allows XSS...
CVE-2021-38149
index.php/admin/adduser in Chikitsa Patient Management System 2.0.0 allows XSS...
CVE-2021-38149: Improper Neutralization of Input During Web Page Generation
index.php/admin/adduser in Chikitsa Patient Management System 2.0.0 allows XSS...
CVE-2021-38151: Improper Neutralization of Input During Web Page Generation
index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS...
CVE-2021-38152: Improper Neutralization of Input During Web Page Generation
index.php/appointment/insertpatientaddappointment in Chikitsa Patient Management System 2.0.0 allows XSS...
PT-2021-10339
Name of the Vulnerable Software and Affected Versions: Metinfo version 7.0.0 Description: The issue allows attackers to perform a directory traversal and access sensitive information through the /admin/index.php?n=system&c=filept&a=doGetFileList endpoint. Recommendations: For Metinfo version 7.0....
CVE-2020-19304: Improper Limitation of a Pathname to a Restricted Directory
An issue in /admin/index.php?n=system&c=filept&a=doGetFileList of Metinfo v7.0.0 allows attackers to perform a directory traversal and access sensitive information...
CVE-2020-18158
Cross Site Scripting XSS vulnerability in HuCart 5.7.4 via nickname in index.php...
CVE-2020-18157
Cross Site Request Forgery CSRF vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php...