13498 matches found
CVE-2020-11671
Lack of authorization controls in REST API functions in TeamPass through 2.1.27.36 allows any TeamPass user with a valid API token to become a TeamPass administrator and read/modify all passwords via authenticated api/index.php REST API calls. NOTE: the API is not available by default...
PT-2020-12761
Name of the Vulnerable Software and Affected Versions TeamPass versions 2.1.27.36 and earlier Description The issue is related to a lack of authorization controls in REST API functions. This allows any TeamPass user with a valid API token to become a TeamPass administrator and read or modify all...
CVE-2020-11671: Missing Authorization
Lack of authorization controls in REST API functions in TeamPass through 2.1.27.36 allows any TeamPass user with a valid API token to become a TeamPass administrator and read/modify all passwords via authenticated api/index.php REST API calls. NOTE: the API is not available by default...
Cross-site Scripting (XSS)
forkcms/forkcms is vulnerable to cross-site scripting XSS attacks. The library doesn't properly escape user input displayname value in the function loadDataGrid in Index.php allowing a malicious user to inject and execute malicious web script...
PT-2020-18369
Name of the Vulnerable Software and Affected Versions PrestaShop versions 1.5.0.0 through 1.7.6.4 Description The issue is related to improper access control in PrestaShop, specifically affecting legacy controllers since version 1.5.0.0. The affected API endpoints include...
CVE-2020-11712
CVE-2020-11712 affects the Open Upload project (PHP-based file upload app) up to version 0.4.3. The issue is a Cross-Site Scripting (XSS) vulnerability exploitable via index.php?action=u and the filename field. The available sources state the vulnerability and affected version but do not provide ...
CVE-2020-11712: Improper Neutralization of Input During Web Page Generation
Open Upload through 0.4.3 allows XSS via index.php?action=u and the filename field...
PT-2020-12798
Name of the Vulnerable Software and Affected Versions Open Upload versions 0.4.3 and earlier Description The issue allows for XSS exploitation via the "index.php?action=u" endpoint, specifically through the filename field. This can lead to malicious script execution. Recommendations For Open Uplo...
PT-2020-12683
Name of the Vulnerable Software and Affected Versions Search Meter plugin versions through 2.13.2 Description The issue allows user input introduced in the search bar to be any formula, potentially leading to remote code execution via CSV injection if a specific export is performed, specifically...
fcnetwork.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1123653 Security Researcher securaji Helped patch 77 vulnerabilities Received 3 Coordinated Disclosure badges Received 4 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting fcnetwork.com website and it...
Joomla! com_hdwplayer 4.2 - search.php SQL Injection
Joomla! comhdwplayer 4.2 - search.php SQL Injection Exploit Title: Joomla! comhdwplayer 4.2 - 'search.php' SQL Injection Dork: inurl:"index.php?option=comhdwplayer" Date: 2020-03-23 Exploit Author: qw3rTyTy Vendor Homepage: https://www.hdwplayer.com/ Software Link:...
CVE-2019-20524
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter...
CVE-2019-20524
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter...
CVE-2019-20523
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter...
Cross site scripting
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter...
Cross site scripting
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter...
CVE-2019-20522
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter...
CVE-2019-20522
CVE-2019-20522 affects ilchCMS 2.1.23 and enables Cross-Site Scripting via the index.php/partner/index Link parameter. The connected sources consistently describe a client-side script execution vulnerability in ilchCMS, with no details provided on affected versions beyond 2.1.23 in public CVE rec...
CVE-2019-20523
CVE-2019-20523 affects ilchCMS 2.1.23, where an XSS vulnerability exists in the index.php/partner/index Name parameter. The issue allows injection of script into client-side context, as described in public sources. The NVD entry lists an overall impact of low to partial integrity impact (I:L) wit...