CVE-2021-4254 ctrlo lenio Notice main.tt cross site scripting

A vulnerability has been found in ctrlo lenio and classified as problematic. Affected by this vulnerability is an unknown functionality of the file views/layouts/main.tt of the component Notice Handler. The manipulation of the argument notice.notice.text leads to cross site scripting. The attack...

CVE-2021-4256 ctrlo lenio index.tt cross site scripting

A vulnerability was found in ctrlo lenio. It has been classified as problematic. This affects an unknown part of the file views/index.tt. The manipulation of the argument task.name/task.site.org.name leads to cross site scripting. It is possible to initiate the attack remotely. The name of the...

CVE-2021-4253 ctrlo lenio Ticket Lenio.pm cross site scripting

A vulnerability, which was classified as problematic, was found in ctrlo lenio. Affected is an unknown function in the library lib/Lenio.pm of the component Ticket Handler. The manipulation of the argument siteid leads to cross site scripting. It is possible to launch the attack remotely. The nam...

CVE-2021-4253 ctrlo lenio Ticket Lenio.pm cross site scripting

A vulnerability, which was classified as problematic, was found in ctrlo lenio. Affected is an unknown function in the library lib/Lenio.pm of the component Ticket Handler. The manipulation of the argument siteid leads to cross site scripting. It is possible to launch the attack remotely. The nam...

CVE-2021-4254 ctrlo lenio Notice main.tt cross site scripting

A vulnerability has been found in ctrlo lenio and classified as problematic. Affected by this vulnerability is an unknown functionality of the file views/layouts/main.tt of the component Notice Handler. The manipulation of the argument notice.notice.text leads to cross site scripting. The attack...

CVE-2021-4255 ctrlo lenio contractor.tt cross site scripting

A vulnerability was found in ctrlo lenio and classified as problematic. Affected by this issue is some unknown functionality of the file views/contractor.tt. The manipulation of the argument contractor.name leads to cross site scripting. The attack may be launched remotely. The name of the patch ...

PT-2022-11611 · Unknown · Ctrlo Lenio

Name of the Vulnerable Software and Affected Versions: ctrlo lenio affected versions not specified Description: A vulnerability was found in ctrlo lenio and classified as problematic. It affects some unknown functionality of the file views/contractor.tt. The manipulation of the contractor.name...

PT-2022-11610 · Unknown · Ctrlo Lenio

Name of the Vulnerable Software and Affected Versions: ctrlo lenio affected versions not specified Description: A vulnerability has been found in ctrlo lenio, classified as problematic, affecting an unknown functionality of the file views/layouts/main.tt of the component Notice Handler. The...

CVE-2021-4255: Improper Neutralization

A vulnerability was found in ctrlo lenio and classified as problematic. Affected by this issue is some unknown functionality of the file views/contractor.tt. The manipulation of the argument contractor.name leads to cross site scripting. The attack may be launched remotely. The name of the patch ...

CVE-2021-4256: Improper Neutralization

A vulnerability was found in ctrlo lenio. It has been classified as problematic. This affects an unknown part of the file views/index.tt. The manipulation of the argument task.name/task.site.org.name leads to cross site scripting. It is possible to initiate the attack remotely. The name of the...

CVE-2021-4254: Improper Neutralization

A vulnerability has been found in ctrlo lenio and classified as problematic. Affected by this vulnerability is an unknown functionality of the file views/layouts/main.tt of the component Notice Handler. The manipulation of the argument notice.notice.text leads to cross site scripting. The attack...

PT-2022-11618

Name of the Vulnerable Software and Affected Versions ctrlo lenio affected versions not specified Description A vulnerability was found in ctrlo lenio, classified as problematic. It affects an unknown part of the file views/index.tt. The manipulation of the argument task.name/task.site.org.name...

PT-2022-11607

Name of the Vulnerable Software and Affected Versions ctrlo lenio affected versions not specified Description A vulnerability was found in the library lib/Lenio.pm of the component Ticket Handler. The manipulation of the site id argument leads to cross-site scripting. It is possible to launch the...

CVE-2021-4257: Improper Neutralization

A vulnerability was found in ctrlo lenio. It has been declared as problematic. This vulnerability affects unknown code of the file views/task.tt of the component Task Handler. The manipulation of the argument site.org.name/check.name/task.tasktype.name/task.name leads to cross site scripting. The...

CVE-2021-4253

The CVE-2021-4253 entry concerns the ctrlo lenio project, specifically the Ticket Handler component’s library lib/Lenio.pm. The vulnerability arises from an issue in the function handling the site_id parameter, leading to cross-site scripting that can be triggered remotely. Affected versions and ...

CVE-2021-4254

CVE-2021-4254 affects ctrlo lenio, specifically the Notice Handler’s file views/layouts/main.tt. The vulnerability arises from manipulation of the argument notice.notice.text, enabling cross-site scripting (XSS). The issue can be exploited remotely and is tied to an unknown functionality within t...

CVE-2021-4256

CVE-2021-4256 affects the ctrlo lenio project, originating from an issue in the file views/index.tt. Attacker-controlled parameters task.name and task.site.org.name can be manipulated to trigger cross-site scripting. The vulnerability is exploitable remotely. A patch is identified by the hash e16...

CVE-2021-4257

The CVE-2021-4257 entry concerns ctrlo lenio. The vulnerability is in the Task Handler’s views/task.tt, where manipulating the argument path site.org.name/check.name/task.tasktype.name/task.name enables cross-site scripting. A remote attacker could exploit this, with impact limited to client-side...

ctrlo lenio 安全漏洞

lenio is an open source facility management system from ctrlo. A security vulnerability exists in ctrlo lenio, which stems from an unknown function in its Ticket Handler component lib/Lenio.pm library that operates on the parameter siteid leads allowing an attacker to implement cross-site scripti...

CVE-2021-4255

CVE-2021-4255 affects ctrlo lenio. The vulnerability lies in an unknown functionality of views/contractor.tt where manipulating the contractor.name parameter leads to cross-site scripting. Exploitation is described as potentially remote. A patch identifier is provided (e1646d5cd0a2fbab9eb505196dd...