5003 matches found
OpenSourceCMS.com Clansphere CMS 跨站脚本漏洞
ClanSphere is a modular Web-CMS. A cross-site scripting vulnerability exists in Clansphere 2011.4. The vulnerability can be exploited to inject JavaScript via the "module" parameter...
PunBB Cross-Site Scripting Vulnerability (CNVD-2021-22158)
PunBB is a lightweight PHP-based forum system distributed under the GNU General Public License. A cross-site scripting vulnerability exists in the email BBcode tag in versions of PunBB prior to 1.4.6. An attacker can exploit this vulnerability to inject arbitrary JavaScript into any forum message...
CVE-2021-28968
An issue was discovered in PunBB before 1.4.6. An XSS vulnerability in the email BBcode tag allows with authentication injecting arbitrary JavaScript into any forum message...
CVE-2021-27308
A cross-site scripting XSS vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to inject JavaScript via the "redirect" parameter...
Cross site scripting
A cross-site scripting XSS vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to inject JavaScript via the "redirect" parameter...
CVE-2021-27308
A cross-site scripting XSS vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to inject JavaScript via the "redirect" parameter...
FUDForum cross-site scripting vulnerability (CNVD-2021-22864)
FUDforum is an open source forum system built on PHP+MySQL/PostgreSQL. A cross-site scripting vulnerability exists in FUDForum 3.1.0. An attacker can exploit this vulnerability to inject JavaScript via the author parameter in index.php...
Piyush Patil 4images 跨站脚本漏洞
4images is an open source image management system. 4images 1.8 version of the cross-site scripting vulnerability , the vulnerability stems from the redirect parameter does not do effective filtering of user input , a remote attacker can use this vulnerability to inject JavaScript...
FUDForum cross-site scripting vulnerability (CNVD-2021-22862)
FUDforum is an open source forum system built on PHP+MySQL/PostgreSQL. A cross-site scripting vulnerability exists in FUDForum 3.1.0. An attacker can exploit this vulnerability to inject JavaScript via the srch parameter in index.php...
CVE-2021-27520
A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter...
Cross site scripting
A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter...
CVE-2021-27519
CVE-2021-27519 – FUDForum 3.1.0 Cross-Site Scripting Affected software: FUDForum 3.1.0. Issue: an XSS vulnerability exists in index.php where user input in the “srch” parameter is not properly sanitized, allowing remote attackers to inject JavaScript. Impact: as described, successful exploitation...
Seo Panel Cross-Site Scripting Vulnerability (CNVD-2021-19686)
SEO Panel is a free, open source SEO optimization software. A cross-site scripting vulnerability exists in Seo Panel 4.8.0. A remote attacker can exploit this vulnerability to inject JavaScript via the archive.php searchname parameter...
FUDForum 跨站脚本漏洞
FUDforum is an open source forum system built on PHP+MySQL/PostgreSQL. A cross-site scripting vulnerability exists in FUDForum 3.1.0. An attacker can exploit this vulnerability to inject JavaScript via the author parameter in index.php...
Seo Panel Cross-Site Scripting Vulnerability (CNVD-2021-22151)
SEO Panel is a free, open source SEO optimization software. A cross-site scripting vulnerability exists in Seo Panel 4.8.0. A remote attacker can exploit this vulnerability to inject JavaScript via the alerts.php fromtime parameter...
Seo Panel Cross-Site Scripting Vulnerability (CNVD-2021-22150)
SEO Panel is a free, open source SEO optimization software. A cross-site scripting vulnerability exists in Seo Panel 4.8.0. A remote attacker can exploit this vulnerability to inject JavaScript via the settings.php category parameter...
CVE-2021-28418
A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter...
CVE-2021-28418
A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter...
Cross site scripting
A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and the "searchname" parameter...
Cross site scripting
A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via alerts.php and the "fromtime" parameter...