CVE-2020-8947

functionsnetflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the index.php?operation/netflow/nfliveview ipdst, dstport, or srcport parameter, a different vulnerability than CVE-2019-20224...

CVE-2020-8947

functionsnetflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the index.php?operation/netflow/nfliveview ipdst, dstport, or srcport parameter, a different vulnerability than CVE-2019-20224...

CVE-2020-8947: Improper Neutralization of Special Elements used in an OS Command

functionsnetflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the index.php?operation/netflow/nfliveview ipdst, dstport, or srcport parameter, a different vulnerability than CVE-2019-20224...

PT-2020-20385

Name of the Vulnerable Software and Affected Versions Artica Pandora FMS version 7.0 Description The issue allows remote attackers to execute arbitrary OS commands via shell metacharacters in the "index.php?operation/netflow/nf live view" API endpoint, specifically in the ip dst, dst port, or src...

CVE-2011-4938

Multiple cross-site scripting XSS vulnerabilities in Ariadne 2.7.6 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 index.php and 2 loader.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Ariadne 2.7.6 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 index.php and 2 loader.php...

CVE-2011-4938

CVE-2011-4938 affects Ariadne 2.7.6, with multiple XSS vulnerabilities that allow remote injection of arbitrary web script or HTML via PATH_INFO to index.php and loader.php. The vulnerability is caused by improper handling of PATH_INFO inputs, leading to script execution under the context of the ...

CVE-2011-4938

Multiple cross-site scripting XSS vulnerabilities in Ariadne 2.7.6 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 index.php and 2 loader.php...

CVE-2011-4938

Multiple cross-site scripting XSS vulnerabilities in Ariadne 2.7.6 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 index.php and 2 loader.php...

CVE-2011-4938: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Ariadne 2.7.6 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 index.php and 2 loader.php...

PT-2020-7148

Name of the Vulnerable Software and Affected Versions Ariadne version 2.7.6 Description The issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO parameter to API endpoints such as "index.php" and "loader.php". Recommendations For Ariadne version 2.7.6, consider...

CVE-2020-8825

index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS...

Cross site scripting

index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS...

CVE-2020-8825

Vanilla Forums 2.6.3 is affected by a stored cross-site scripting (XSS) vulnerability in index.php?p=/dashboard/settings/branding. The issue arises from insufficient input validation in the branding settings page, enabling an attacker to inject payloads that can execute in a user’s browser. The C...

CVE-2020-8825

index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS...

Exploit for Cross-site Scripting in Vanillaforums Vanilla

CVE-2020-8825 Publish: CVE-2020-8825https:...

PT-2020-20308

Name of the Vulnerable Software and Affected Versions Vanilla version 2.6.3 Description The issue allows for stored XSS in the index.php?p=/dashboard/settings/branding endpoint. Recommendations For version 2.6.3, update to a newer version that contains a fix for this issue...

CVE-2020-8825: Improper Neutralization of Input During Web Page Generation

index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS...

CVE-2012-4029

Cross-site scripting XSS vulnerability in main/dropbox/index.php in Chamilo LMS before 1.8.8.6 allows remote attackers to inject arbitrary web script or HTML via the categoryname parameter in an addsentcategory action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Open-School Community Edition 2.2 allow remote attackers to inject arbitrary web script or HTML via the YIICSRFTOKEN HTTP cookie or the StudentDocument, StudentCategories, StudentPreviousDatas parameters to index.php...