12 matches found
EUVD-2022-34044
Malicious code in bioql PyPI...
CVE-2022-32124
74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /index/jobfairol/show/...
CVE-2022-32124
74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /index/jobfairol/show/...
Cross site scripting
74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /index/jobfairol/show/...
CVE-2022-33095
74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/jobfairol/resumelist...
CVE-2022-32124
74cmsSE v3.5.1 contains a reflective XSS vulnerability in the component path /index/jobfairol/show/. The root cause is insufficient validation/encoding of user-supplied data in that endpoint, allowing injected JavaScript to be reflected back to the browser. Impact is client-side code execution in...
CVE-2022-32124
74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /index/jobfairol/show/...
PT-2022-21102
Name of the Vulnerable Software and Affected Versions 74cmsSE version 3.5.1 Description A reflective cross-site scripting XSS issue was found in the component /index/jobfairol/show/. This issue allows for the execution of malicious scripts on the client-side, potentially leading to unauthorized...
PT-2022-21686
Name of the Vulnerable Software and Affected Versions 74cmsSE version 3.5.1 Description A SQL injection issue was found in 74cmsSE via the keyword parameter at the "/home/jobfairol/resumelist" API endpoint. Recommendations For version 3.5.1, avoid using the keyword parameter in the affected API...
CVE-2022-32124: Improper Neutralization of Input During Web Page Generation
74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /index/jobfairol/show/...
PT-2022-19798
Name of the Vulnerable Software and Affected Versions 74cmsSE version 3.5.1 Description A SQL injection issue was found in 74cmsSE via the keyword parameter at the "/home/jobfairol/resumelist" endpoint. This allows for potential exploitation. Recommendations For 74cmsSE version 3.5.1, consider...
CVE-2022-29721: Improper Neutralization of Special Elements used in an SQL Command
74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/jobfairol/resumelist...