894 matches found
Jorani Leave Management 0.6.5 - Cross-Site Scripting
Exploit Title: Jorani Leave Management System 0.6.5 – Cross-Site Scripting Exploit Author: Javier Olmedo Website: https://hackpuntes.com Date: 2018-09-06 Google Dork: N/A Vendor: Benjamin BALET Software Link: https://jorani.org/download.html Affected Version: 0.6.5 and possibly before Patched...
Code injection
An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen...
CVE-2018-15603
An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen...
CVE-2018-15603
An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen...
CVE-2018-15603
Victor CMS (up to 2018-05-10) is affected by a cross-site scripting (XSS) vulnerability in the Author field of the “Leave a Comment” screen. The issue allows injected script via this input. Root cause details are not provided beyond the XSS vector; no patch/version details are enumerated in the s...
CVE-2018-15603
An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen...
Victor CMS Cross-Site Scripting Vulnerability
Victor CMS is a PHP-based content management system CMS. A cross-site scripting vulnerability exists in Victor CMS 2018-05-10 and earlier versions. A remote attacker can exploit the vulnerability to execute JavaScript code with the Author field on the 'Leave a Comment' page...
CVE-2018-15603: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen...
PT-2018-13111
Name of the Vulnerable Software and Affected Versions Victor CMS versions prior to 2018-05-10 Description An issue was discovered that allows for XSS via the Author field of the "Leave a Comment" screen. Recommendations For versions prior to 2018-05-10, update to a version released after 2018-05-...
WeChat Pay SDK XXE Injection
Hi List, Title XXE in WeChat Pay Sdk WeChat leave a backdoor on merchant websites ------------------------------------------ Background aMobile payments surge to $9 trillion a year, changing how people shop, borrowaeven panhandlea, as WSJ.com once reported. As a payment security researcher, I...
PT-2018-2559
Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.17.11 Description The issue is related to a use-after-free error in the ucma leave multicast function, allowing attackers to cause a denial of service. This occurs because the function accesses a certain data...
HackerOne: Harvesting all private invites using leave program fast-tracked invitation and security@ email forwarding feature
Hi HackerOne, Summary: I have found a way that it is possible to harvest all private invitation using the new Leave Program feature together with the security@ email forwarding feature without any user interaction. --- Description: First, when the program activated the security@ email forwarding ...
PHP Scripts Mall Multi Language Olx Clone Script Cross Site Scripting Vulnerability
PHP Scripts Mall Multi Language Olx Clone Script is a set of PHP based scripts for multilingual information publishing websites from PHP Scripts Mall, India. A cross-site scripting vulnerability exists in PHP Scripts Mall Multi Language Olx Clone Script version 2.0.6. A remote attacker can exploi...
CVE-2018-6845
PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...
Design/Logic Flaw
PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...
CVE-2018-6845
PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...
CVE-2018-6845
PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...
CVE-2018-6845
The CVE-2018-6845 entry concerns PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 and a Cross-Site Scripting (XSS) vulnerability exposed via the Leave Comment field. The CNVD/NVD records confirm a stored/reflected XSS pathway where user-supplied input in comments can inject arbitrary script...
PT-2018-17773
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Multi Language Olx Clone Script version 2.0.6 Description The issue concerns a problem where an attacker can inject malicious code via the Leave Comment field, potentially leading to security breaches. Recommendations For PHP...