20 matches found
EUVD-2022-29092
Malicious code in bioql PyPI...
CVE-2022-24181
Cross-site scripting XSS via Host Header injection in PKP Open Journals System 2.4.8 = 3.3 allows remote attackers to inject arbitary code via the X-Forwarded-Host Header...
PKP Open Journals System Cross-Site Scripting Vulnerability
PKP Open Journals System is a journal system. A cross-site scripting vulnerability exists in PKP Open Journals System prior to version 3.3.0-16, which stems from the inability to properly escape special characters in a title, and can be exploited by an attacker to inject malicious script into a w...
PKP Open Journals System Cross-Site Scripting Vulnerability
PKP Open Journals System is a journal system. A cross-site scripting vulnerability exists in PKP Open Journals System prior to version 3.3.0-16, which stems from the fact that certain inputs are not escaped and can be exploited by an attacker to inject malicious script into a web site...
PKP Open Journals System 3.3 - Cross-Site Scripting Vulnerability
Exploit Title: PKP Open Journals System 3.3 - Cross-Site Scripting XSS Exploit Author: Hemant Kashyap Vendor Homepage: https://github.com/pkp/pkp-lib/issues/7649 Version: PKP Open Journals System 2.4.8 = 3.3 Tested on: All OS CVE : CVE-2022-24181 References: https://youtu.be/v8-9evO2oVg XSS via...
PKP Open Journals System 3.3 Cross Site Scripting
Exploit Title: PKP Open Journals System 3.3 - Cross-Site Scripting XSS Date: 31/01/2022 Exploit Author: Hemant Kashyap Vendor Homepage: https://github.com/pkp/pkp-lib/issues/7649 Version: PKP Open Journals System 2.4.8 = 3.3 Tested on: All OS CVE : CVE-2022-24181 References:...
CVE-2022-24181
Cross-site scripting XSS via Host Header injection in PKP Open Journals System 2.4.8 = 3.3 allows remote attackers to inject arbitary code via the X-Forwarded-Host Header...
CVE-2022-24181
Cross-site scripting XSS via Host Header injection in PKP Open Journals System 2.4.8 = 3.3 allows remote attackers to inject arbitary code via the X-Forwarded-Host Header...
CVE-2022-24181
Cross-site scripting XSS via Host Header injection in PKP Open Journals System 2.4.8 = 3.3 allows remote attackers to inject arbitary code via the X-Forwarded-Host Header...
Cross site scripting
Cross-site scripting XSS via Host Header injection in PKP Open Journals System 2.4.8 = 3.3 allows remote attackers to inject arbitary code via the X-Forwarded-Host Header...
CVE-2022-24181
Cross-site scripting XSS via Host Header injection in PKP Open Journals System 2.4.8 = 3.3 allows remote attackers to inject arbitary code via the X-Forwarded-Host Header...
CVE-2022-24181
PKP Open Journal Systems 2.4.8–3.3 is affected by a Cross‑Site Scripting (XSS) vulnerability via the X-Forwarded-Host header (Host Header injection). The underlying issue is header-based input that enables arbitrary script injection into rendered pages, potentially leading to data theft or deface...
PKP Open Journals System 跨站脚本漏洞
PKP Open Journals System is a journal system. A security vulnerability exists in PKP Open Journals System versions prior to 3.3 to 2.4.8, which allows an attacker to inject arbitrary code via the X-Forwarded-Host header...
phpBB Journals System Mod 1.0.2 [RC2] Remote File Include Exploit
No description provided by source. !/usr/bin/perl Journals System Independant Journals System for phpBB Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://projects.nbishop.name/phpbb/files/journalssystem1.0.2.zip...
CVE-2006-5306
Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 RC2 and earlier for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter in 1 includes/journalsdelete.php, 2 includes/journalspost.php, or 3...
CVE-2006-5306
The CVE-2006-5306 entry concerns multiple PHP remote file inclusion flaws in the Journals System module for phpBB (version 1.0.2 RC2 and earlier). The vulnerability allows remote code execution by supplying a URL to the phpbb_root_path parameter in includes/journals_delete.php, includes/journals_...
phpBB Journals System Mod 1.0.2 RC2 - Remote File Inclusion
phpBB Journals System Mod 1.0.2 RC2 - Remote File Inclusion !/usr/bin/perl Journals System Independant Journals System for phpBB Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://projects.nbishop.name/phpbb/files/journalssystem1.0.2.z...
phpBB Journals System Mod 1.0.2 [RC2] Remote File Include Exploit
Exploit for unknown platform in category web applications ================================================================= phpBB Journals System Mod 1.0.2 RC2 Remote File Include Exploit ================================================================= !/usr/bin/perl Journals System Independant...
phpBB Journals System Mod 1.0.2 RC2 - Remote File Inclusion
!/usr/bin/perl Journals System Independant Journals System for phpBB Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://projects.nbishop.name/phpbb/files/journalssystem1.0.2.zip use IO::Socket; use LWP::Simple;...
phpBB Journals System Mod 1.0.2 [RC2] Remote File Include Exploit
No description provided by source. !/usr/bin/perl Journals System Independant Journals System for phpBB Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://projects.nbishop.name/phpbb/files/journalssystem1.0.2.zip use IO::Socket; use...