13465 matches found
CVE-2021-40922
CVE-2021-40922 is a cross-site scripting (XSS) vulnerability affecting the open source defect-tracking system Bugs/Tinyissue in versions 1.8 and earlier, exploitable via the last_name parameter in install/index.php . The root cause is improper input handling in that endpoint, enabling remote atta...
CVE-2021-40922
Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the lastname parameter...
CVE-2021-40922: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the lastname parameter...
PT-2021-23016
Name of the Vulnerable Software and Affected Versions FlexTV beta development version Description The issue is related to a cross-site scripting XSS vulnerability in the index.php file of FlexTV. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the PHP SELF...
CVE-2021-40923: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the email parameter...
PT-2021-23011
Name of the Vulnerable Software and Affected Versions bugs versions 1.8 and below Description The issue allows remote attackers to inject arbitrary web script or HTML via the email parameter in the install/index.php file. This enables attackers to perform cross-site scripting XSS attacks...
PT-2021-23012
Name of the Vulnerable Software and Affected Versions bugs versions 1.8 and below Description The issue is a cross-site scripting XSS vulnerability in the install/index.php file. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the first name parameter...
PT-2021-23010
Name of the Vulnerable Software and Affected Versions bugs versions 1.8 and below Description The issue is a cross-site scripting XSS vulnerability in the install/index.php file. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the last name parameter...
CVE-2021-40928: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in FlexTV beta development version allows remote attackers to inject arbitrary web script or HTML via the PHPSELF parameter...
CVE-2021-40924: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the firstname parameter...
PT-2021-10542
Name of the Vulnerable Software and Affected Versions: UCMS version 1.4.7 Description: A stored cross-site scripting XSS issue in the "/ucms/index.php?do=list edit" endpoint of UCMS allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, descriptio...
UCMS 跨站脚本漏洞
UCMS is a content management system written in PHP. A security vulnerability exists in UCMS, which originates from a stored cross-site scripting XSS vulnerability in ucms index.php. An attacker can exploit this vulnerability to execute client-side code...
CVE-2020-20781: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in /ucms/index.php?do=listedit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, description or content text fields...
CVE-2020-20124
Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...
CVE-2020-20124
Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...
CVE-2020-20124
Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...
CVE-2020-20124
Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...
CVE-2020-20124: Improper Control of Generation of Code
Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...
WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2023-17601)
WUZHI CMS is a PHP and MySQL based Content Management System CMS from Beijing WuZHI Technology Co. The vulnerability can be exploited by remote attackers to perform cross-site scripting attacks via the "email username" parameter in "index.php"...