Cross site scripting

Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting XSS via leave comment functionality...

PT-2022-22870 · Amasty · Amasty Blog

Name of the Vulnerable Software and Affected Versions: Amasty Blog version 2.10.3 Description: The issue is related to Cross Site Scripting XSS via the leave comment functionality. This means an attacker could potentially inject malicious scripts into the website, affecting user sessions...

CVE-2022-35500

Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting XSS via leave comment functionality...

CVE-2022-35500

Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting XSS via leave comment functionality...

Online Leave Management System SQL Injection Vulnerability (CNVD-2022-80690)

Online Leave Management System is an online leave management system. version v1.0 of Online Leave Management System has a security vulnerability that originated through the component /admin/?page=user/manageuser&id= found to contain a SQL injection vulnerability. No detailed vulnerability details...

CVE-2022-43179

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/?page=user/manageuser&id=...

CVE-2022-43179

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/?page=user/manageuser&id=...

Sql injection

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/?page=user/manageuser&id=...

CVE-2022-43179

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/?page=user/manageuser&id=...

CVE-2022-43179

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/?page=user/manageuser&id=...

Online Leave Management System SQL注入漏洞

Online Leave Management System is an online leave management system. version v1.0 of Online Leave Management System has a security vulnerability that originated through the component /admin/?page=user/manageuser&id= found to contain a SQL injection vulnerability. No detailed vulnerability details...

PT-2022-26789 · Unknown · Online Leave Management System

Name of the Vulnerable Software and Affected Versions: Online Leave Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. It affects the /admin/?page=user/manage user&id= component. This vulnerability can be exploited via the id variable. Recommendation...

CVE-2022-43179

Online Leave Management System v1.0 is affected by a SQL injection in /admin/?page=user/manage_user&id=. Root cause: unsafe construction of SQL via the id parameter leading to full access to data. CVSSv3.1 metrics indicate high impact on confidentiality, integrity, and availability (AV:N/AC:L/PR:...

kernel: mac80211: fix potential double free on mesh join

In the Linux kernel, the following vulnerability has been resolved: mac80211: fix potential double free on mesh join While commit 6a01afcf8468 "mac80211: mesh: Free ie data when leaving mesh" fixed a memory leak on mesh leave / teardown it introduced a potential memory corruption caused by a doub...

CVE-2022-22219

Due to the Improper Handling of an Unexpected Data Type in the processing of EVPN routes on Juniper Networks Junos OS and Junos OS Evolved, an attacker in direct control of a BGP client connected to a route reflector, or via a machine in the middle MITM attack, can send a specific EVPN route...

CVE-2022-3502

A vulnerability was found in Human Resource Management System 1.0. It has been classified as problematic. This affects an unknown part of the component Leave Handler. The manipulation of the argument Reason leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

CVE-2022-3502

A vulnerability was found in Human Resource Management System 1.0. It has been classified as problematic. This affects an unknown part of the component Leave Handler. The manipulation of the argument Reason leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

CVE-2022-3502

A vulnerability was found in Human Resource Management System 1.0. It has been classified as problematic. This affects an unknown part of the component Leave Handler. The manipulation of the argument Reason leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

Cross site scripting

A vulnerability was found in Human Resource Management System 1.0. It has been classified as problematic. This affects an unknown part of the component Leave Handler. The manipulation of the argument Reason leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

CVE-2022-3502

CVE-2022-3502 affects Human Resource Management System (HRMS) version 1.0, specifically the Leave Handler component. The vulnerability arises from manipulation of the Reason argument, enabling cross-site scripting (XSS). The issue is exploitable remotely and the exploit has been disclosed publicl...