CVE-2021-4255

CVE-2021-4255 affects ctrlo lenio. The vulnerability lies in an unknown functionality of views/contractor.tt where manipulating the contractor.name parameter leads to cross-site scripting. Exploitation is described as potentially remote. A patch identifier is provided (e1646d5cd0a2fbab9eb505196dd...

ctrlo lenio 安全漏洞

lenio is an open source facility management system from ctrlo. A security vulnerability exists in ctrlo lenio, which stems from an unknown function in its Ticket Handler component lib/Lenio.pm library that operates on the parameter siteid leads allowing an attacker to implement cross-site scripti...

PT-2022-11611 · Unknown · Ctrlo Lenio

Name of the Vulnerable Software and Affected Versions: ctrlo lenio affected versions not specified Description: A vulnerability was found in ctrlo lenio and classified as problematic. It affects some unknown functionality of the file views/contractor.tt. The manipulation of the contractor.name...

CVE-2021-4255 ctrlo lenio contractor.tt cross site scripting

A vulnerability was found in ctrlo lenio and classified as problematic. Affected by this issue is some unknown functionality of the file views/contractor.tt. The manipulation of the argument contractor.name leads to cross site scripting. The attack may be launched remotely. The name of the patch ...

CVE-2021-4256

CVE-2021-4256 affects the ctrlo lenio project, originating from an issue in the file views/index.tt. Attacker-controlled parameters task.name and task.site.org.name can be manipulated to trigger cross-site scripting. The vulnerability is exploitable remotely. A patch is identified by the hash e16...

CVE-2021-4254

CVE-2021-4254 affects ctrlo lenio, specifically the Notice Handler’s file views/layouts/main.tt. The vulnerability arises from manipulation of the argument notice.notice.text, enabling cross-site scripting (XSS). The issue can be exploited remotely and is tied to an unknown functionality within t...

CVE-2021-4253 ctrlo lenio Ticket Lenio.pm cross site scripting

A vulnerability, which was classified as problematic, was found in ctrlo lenio. Affected is an unknown function in the library lib/Lenio.pm of the component Ticket Handler. The manipulation of the argument siteid leads to cross site scripting. It is possible to launch the attack remotely. The nam...

ctrlo lenio 跨站脚本漏洞

lenio is an open source facility management system from ctrlo. A security vulnerability exists in ctrlo lenio that stems from an unknown section of its views/index.tt file that operates on the parameters task.name/task.site.org.name allowing attackers to implement cross-site scripting...

CVE-2021-4253 ctrlo lenio Ticket Lenio.pm cross site scripting

A vulnerability, which was classified as problematic, was found in ctrlo lenio. Affected is an unknown function in the library lib/Lenio.pm of the component Ticket Handler. The manipulation of the argument siteid leads to cross site scripting. It is possible to launch the attack remotely. The nam...

ctrlo lenio 安全漏洞

lenio is an open source facility management system from ctrlo. A security vulnerability exists in ctrlo lenio, which stems from an unknown function in the file views/layouts/main.tt of its Notice Handler component that operates on the parameter notice.notice.text allowing an attacker to implement...

ctrlo lenio 安全漏洞

lenio is an open source facility management system from ctrlo. A security vulnerability exists in ctrlo lenio, which stems from some unknown functions in its views/contractor.tt file that operate on the parameter contractor.name allowing an attacker to implement cross-site scripting...

CVE-2021-4253

The CVE-2021-4253 entry concerns the ctrlo lenio project, specifically the Ticket Handler component’s library lib/Lenio.pm. The vulnerability arises from an issue in the function handling the site_id parameter, leading to cross-site scripting that can be triggered remotely. Affected versions and ...

CVE-2021-4254 ctrlo lenio Notice main.tt cross site scripting

A vulnerability has been found in ctrlo lenio and classified as problematic. Affected by this vulnerability is an unknown functionality of the file views/layouts/main.tt of the component Notice Handler. The manipulation of the argument notice.notice.text leads to cross site scripting. The attack...

CVE-2021-4257

The CVE-2021-4257 entry concerns ctrlo lenio. The vulnerability is in the Task Handler’s views/task.tt, where manipulating the argument path site.org.name/check.name/task.tasktype.name/task.name enables cross-site scripting. A remote attacker could exploit this, with impact limited to client-side...