PT-2021-11210

Name of the Vulnerable Software and Affected Versions: College Management System Php version 1.0 Description: The issue concerns SQL injection vulnerabilities in the index.php page. These vulnerabilities arise from the POST parameters unametxt and pwdtxt, which are not filtered before being passe...

CVE-2021-3340

A cross-site scripting XSS vulnerability in many forms of Wikindx before 5.7.0 and 6.x through 6.4.0 allows remote attackers to inject arbitrary web script or HTML via the message parameter to index.php?action=initLogon or modules/admin/DELETEIMAGES.php...

CVE-2021-3340: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in many forms of Wikindx before 5.7.0 and 6.x through 6.4.0 allows remote attackers to inject arbitrary web script or HTML via the message parameter to index.php?action=initLogon or modules/admin/DELETEIMAGES.php...

PT-2021-20133

Name of the Vulnerable Software and Affected Versions Wikindx versions prior to 5.7.0 Wikindx versions 6.x through 6.4.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the message parameter to "index.php?action=initLogon" or...

CVE-2020-24271: Cross-Site Request Forgery (CSRF)

A CSRF vulnerability was discovered in EasyCMS v1.6 that can add an admin account through index.php?s=/admin/rbacuser/insert/navTabId/rbacuser/callbackType/closeCurrent, then post username=&password=...

Revive Adserver Cross-Site Scripting Vulnerability (CNVD-2021-07540)

Revive Adserver is an open source ad server under the GNU General Public License license with an integrated banner management interface and a tracking system for collecting statistical information. A reflected cross-site scripting vulnerability exists in userlog-index.php in Revive Adserver...

CVE-2021-22874

Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php via the periodpreset parameter...

CVE-2021-22874

Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php via the periodpreset parameter...

Cross site scripting

Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php via the periodpreset parameter...

CVE-2021-22874

Revive Adserver prior to 5.1.1 is affected by a reflected XSS in userlog-index.php via the period_preset parameter. Public details include a proof-of-concept from HackerOne showing injection on /admin/userlog-index.php with period_preset, enabling script injection and potential cookie theft or re...

CVE-2021-22874

Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php via the periodpreset parameter...

PT-2021-15247

Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 5.1.1 Description The issue is related to a reflected XSS vulnerability. It affects the userlog-index.php file via the period preset parameter. Recommendations For versions prior to 5.1.1, update to version...

CVE-2021-22874: Improper Neutralization of Input During Web Page Generation

Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php via the periodpreset parameter...

PT-2021-10343

Name of the Vulnerable Software and Affected Versions: Vtiger CRM version 7.2.0 Description: The issue is related to Reflected XSS in Vtiger CRM, where an attacker can perform malicious actions on users who open a maliciously crafted link or third-party web page through the view parameter in...

CVE-2020-19362: Improper Neutralization of Input During Web Page Generation

Reflected XSS in Vtiger CRM v7.2.0 in vtigercrm/index.php? through the view parameter can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page...

PT-2021-16506

Name of the Vulnerable Software and Affected Versions: OpenCATS versions 0.9.5-3 and earlier Description: The issue arises from the unsafe deserialization of requests to "index.php?m=activity", leading to remote code execution. This occurs because lib/DataGrid.php calls unserialize for the...

CVE-2020-23644

XSS exists in JIZHICMS 1.7.1 via index.php/Error/index?msg=XSS to Home/c/ErrorController.php...

CVE-2020-23644

XSS exists in JIZHICMS 1.7.1 via index.php/Error/index?msg=XSS to Home/c/ErrorController.php...

CVE-2020-23643

XSS exists in JIZHICMS 1.7.1 via index.php/Wechat/checkWeixin?signature=1&echostr=XSS to Home/c/WechatController.php...

PT-2021-10921

Name of the Vulnerable Software and Affected Versions JIZHICMS version 1.7.1 Description A security issue exists where an attacker can execute arbitrary code. The issue is related to the "/index.php/Error/index?msg=" API endpoint, which is vulnerable to XSS attacks. This endpoint is handled by th...