13416 matches found
CVE-2019-8363
The CVE-2019-8363 issue affects Verydows 2.0. An XSS vulnerability exists via the index.php?c=main a parameter, demonstrated with a=index[XSS] value. The NVD description confirms this vector and the impact includes reflected/console-like injection in the parameter handling, with CVSS2/3 base scor...
CVE-2019-8363
Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=indexXSS value...
CVE-2019-8363: Improper Neutralization of Input During Web Page Generation
Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=indexXSS value...
PT-2019-18989
Name of the Vulnerable Software and Affected Versions Verydows version 2.0 Description The issue allows for XSS via the index.php?c=main API endpoint, specifically through the a parameter. This can be demonstrated by setting a to a value such as indexXSS. Recommendations For Verydows version 2.0,...
CVE-2019-8334
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&viewid=XSS...
CVE-2019-8335
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&id=XSS...
CVE-2019-8334
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&viewid=XSS...
Cross site scripting
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&viewid=XSS...
CVE-2019-8335
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&id=XSS...
CVE-2019-8334
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&viewid=XSS...
CVE-2019-8334
CVE-2019-8334 affects SchoolCMS 2.3.1 . A cross-site scripting (XSS) flaw is present via the vulnerable request: index.php?a=Index&c=Channel&m=Home&viewid=[XSS], which could lead to injection of arbitrary script when a user loads the affected page. The primary description in the CVE notes an XSS ...
CVE-2019-8335: Improper Neutralization of Input During Web Page Generation
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&id=XSS...
CVE-2019-8334: Improper Neutralization of Input During Web Page Generation
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&viewid=XSS...
PT-2019-18971
Name of the Vulnerable Software and Affected Versions SchoolCMS version 2.3.1 Description An issue was discovered that allows for an XSS vulnerability. The vulnerability can be exploited via the index.php endpoint with specific parameters, including a=Index, c=Channel, m=Home, and viewid set to...
PT-2019-18972
Name of the Vulnerable Software and Affected Versions SchoolCMS version 2.3.1 Description An issue was discovered that allows for an XSS vulnerability. The vulnerability can be exploited via the index.php endpoint with specific parameters, including a=Index, c=Channel, m=Home, and id set to a...
Design/Logic Flaw
Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter...
CVE-2019-7753
The connected documents confirm CVE-2019-7753 applies to Verydows 2.0, with an XSS vulnerability exposed via the index.php?m=api&c=stats&a=count referrer parameter. Red Hat and NVD entries corroborate this issue, describing an input/referrer parameter that can inject scripts. No public exploit de...
CVE-2019-7753: Improper Neutralization of Input During Web Page Generation
Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter...
PT-2019-18744
Name of the Vulnerable Software and Affected Versions Verydows version 2.0 Description The issue is related to a security problem where an attacker can inject malicious code. The estimated number of potentially affected devices worldwide is not available. The problem can be exploited through the...