13592 matches found
Cross site scripting
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&viewid=XSS...
CVE-2019-8334
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&viewid=XSS...
CVE-2019-8335
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&id=XSS...
CVE-2019-8334
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&viewid=XSS...
CVE-2019-8335
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&id=XSS...
CVE-2019-8334
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&viewid=XSS...
CVE-2019-8334
CVE-2019-8334 affects SchoolCMS 2.3.1 . A cross-site scripting (XSS) flaw is present via the vulnerable request: index.php?a=Index&c=Channel&m=Home&viewid=[XSS], which could lead to injection of arbitrary script when a user loads the affected page. The primary description in the CVE notes an XSS ...
PT-2019-18972
Name of the Vulnerable Software and Affected Versions SchoolCMS version 2.3.1 Description An issue was discovered that allows for an XSS vulnerability. The vulnerability can be exploited via the index.php endpoint with specific parameters, including a=Index, c=Channel, m=Home, and id set to a...
PT-2019-18971
Name of the Vulnerable Software and Affected Versions SchoolCMS version 2.3.1 Description An issue was discovered that allows for an XSS vulnerability. The vulnerability can be exploited via the index.php endpoint with specific parameters, including a=Index, c=Channel, m=Home, and viewid set to...
CVE-2019-8335: Improper Neutralization of Input During Web Page Generation
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&id=XSS...
CVE-2019-8334: Improper Neutralization of Input During Web Page Generation
An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&viewid=XSS...
Design/Logic Flaw
Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter...
CVE-2019-7753
The connected documents confirm CVE-2019-7753 applies to Verydows 2.0, with an XSS vulnerability exposed via the index.php?m=api&c=stats&a=count referrer parameter. Red Hat and NVD entries corroborate this issue, describing an input/referrer parameter that can inject scripts. No public exploit de...
PT-2019-18744
Name of the Vulnerable Software and Affected Versions Verydows version 2.0 Description The issue is related to a security problem where an attacker can inject malicious code. The estimated number of potentially affected devices worldwide is not available. The problem can be exploited through the...
CVE-2019-7753: Improper Neutralization of Input During Web Page Generation
Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter...
CVE-2019-7737
A CSRF vulnerability was found in Verydows v2.0 that can add an admin account via index.php?m=backend&c=admin&a=add&step=submit...
CVE-2019-7737
Verydows v2.0 is affected by a CSRF vulnerability that can add an admin account via index.php?m=backend&c=admin&a=add&step=submit. The issue is documented in CVE-2019-7737 with NVD metrics indicating high impact (C/H/I/A) and network attack vector, requiring no authentication. Connected sources c...
CVE-2019-7721
lib/NCCms.class.php in nc-cms 3.5 allows upload of .php files via the index.php?action=save name and editordata parameters...
