13407 matches found
CVE-2012-1495: Improper Neutralization of Special Elements in Output Used by a Downstream Component
install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the formsingleuserlogin parameter...
CVE-2020-7995: Improper Restriction of Excessive Authentication Attempts
The htdocs/index.php?mainmenu=home login page in Dolibarr 10.0.6 allows an unlimited rate of failed authentication attempts...
Cross site scripting
Multiple Cross-site Scripting XSS vulnerabilities exist in Joomla! through 1.7.0 in index.php in the search word, extension, asset, and author parameters...
CVE-2011-3595
CVE-2011-3595 involves multiple Cross-site Scripting (XSS) vulnerabilities in Joomla! up to version 1.7.0. The issue resides in index.php, within the search word, extension, asset, and author parameters, enabling XSS in affected requests. The provided documents confirm the affected software versi...
CVE-2011-3595: Improper Neutralization of Input During Web Page Generation
Multiple Cross-site Scripting XSS vulnerabilities exist in Joomla! through 1.7.0 in index.php in the search word, extension, asset, and author parameters...
PT-2020-7120
Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.7.0 Description Multiple Cross-site Scripting XSS vulnerabilities exist in the index.php file, specifically in the search word, extension, asset, and author parameters. This issue allows for potential exploitation...
CVE-2019-20381
TestLink before 1.9.20 allows XSS via non-lowercase javascript: in the index.php reqURI parameter. NOTE: this issue exists because of an incomplete fix for CVE-2019-19491...
CVE-2019-20381
TestLink before 1.9.20 allows XSS via non-lowercase javascript: in the index.php reqURI parameter. NOTE: this issue exists because of an incomplete fix for CVE-2019-19491...
CVE-2019-20381
TestLink before 1.9.20 allows XSS via non-lowercase javascript: in the index.php reqURI parameter. NOTE: this issue exists because of an incomplete fix for CVE-2019-19491...
PT-2020-10409
Name of the Vulnerable Software and Affected Versions TestLink versions prior to 1.9.20 Description The issue allows for XSS via non-lowercase javascript: in the reqURI parameter of index.php. This problem exists due to an incomplete fix for a previous issue. Recommendations For versions prior to...
CVE-2019-20381: Improper Neutralization of Input During Web Page Generation
TestLink before 1.9.20 allows XSS via non-lowercase javascript: in the index.php reqURI parameter. NOTE: this issue exists because of an incomplete fix for CVE-2019-19491...
CVE-2015-6497
The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Magento Community Edition CE before 1.9.2.1 and Enterprise Edition EE before 1.14.2.1, when used with PHP before 5.4.24 or 5.5.8, allows remote authenticated users to execute arbitrary PHP code via the productData...
CVE-2015-6497
The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Magento Community Edition CE before 1.9.2.1 and Enterprise Edition EE before 1.14.2.1, when used with PHP before 5.4.24 or 5.5.8, allows remote authenticated users to execute arbitrary PHP code via the productData...
PT-2020-7874
Name of the Vulnerable Software and Affected Versions: Magento Community Edition versions prior to 1.9.2.1 Magento Enterprise Edition versions prior to 1.14.2.1 PHP versions prior to 5.4.24 or 5.5.8 Description: The issue allows remote authenticated users to execute arbitrary PHP code via the...
CVE-2015-6497: Improper Input Validation
The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Magento Community Edition CE before 1.9.2.1 and Enterprise Edition EE before 1.14.2.1, when used with PHP before 5.4.24 or 5.5.8, allows remote authenticated users to execute arbitrary PHP code via the productData...
CVE-2011-3202
A Cross-Site Scripting XSS vulnerability exists in the g parameter to index.php in Jcow CMS 4.2 and earlier...
Cross site scripting
A Cross-Site Scripting XSS vulnerability exists in the g parameter to index.php in Jcow CMS 4.2 and earlier...
CVE-2011-3202
A Cross-Site Scripting XSS vulnerability exists in the g parameter to index.php in Jcow CMS 4.2 and earlier...
PT-2020-7115
Name of the Vulnerable Software and Affected Versions Jcow CMS versions 4.2 and earlier Description A Cross-Site Scripting XSS issue exists in the g parameter to "index.php" in Jcow CMS. Recommendations For Jcow CMS versions 4.2 and earlier, consider disabling access to the "index.php" endpoint...