EUVD-2009-3774

Malware in sbrugna...

EUVD-2009-0741

Malware in sbrugna...

CVE-2020-6956

PCS DEXICON 3.4.1 allows XSS via the loginName parameter in loginaction.jsp...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure through the normalization of the loginname attribute. An attacker can determine if a username exists in the system by observing the response behavior during the login process. Remediation Upgrade...

CVE-2024-49757

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the "User Registration allowed" option only hid the...

CVE-2024-9048

A vulnerability was found in yproject RuoYi up to 4.7.9. It has been declared as problematic. Affected by this vulnerability is the function SysUserServiceImpl of the file ruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.java of the component Backend User Import. The...

CVE-2024-9048 y_project RuoYi Backend User Import SysUserServiceImpl.java SysUserServiceImpl cross site scripting

A vulnerability was found in yproject RuoYi up to 4.7.9. It has been declared as problematic. Affected by this vulnerability is the function SysUserServiceImpl of the file ruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.java of the component Backend User Import. The...

RuoYi 跨站脚本漏洞

RuoYi is a backend management system developed by a Chinese individual developer, RuoYi. A cross-site scripting vulnerability exists in RuoYi 4.7.9 and earlier versions, which stems from improper handling of the loginName parameter in the user import function in the backend, resulting in a...

PT-2024-39389

Name of the Vulnerable Software and Affected Versions RuoYi versions up to 4.7.9 Description A vulnerability was found in the function SysUserServiceImpl of the component Backend User Import. The manipulation of the argument loginName leads to cross-site scripting. The attack can be launched...

CVE-2024-34070: Improper Neutralization of Input During Web Page Generation

Froxlor is open source server administration software. Prior to 2.1.9, a Stored Blind Cross-Site Scripting XSS vulnerability was identified in the Failed Login Attempts Logging Feature of the Froxlor Application. An unauthenticated User can inject malicious scripts in the loginname parameter on t...

Cross-Site Scripting (XSS)

froxlor/froxlor is vulnerable to Cross-Site Scripting. The vulnerability is due to inadequate sanitization of user input in the loginname parameter during failed login attempts, which allows attackers to inject and store malicious scripts that are executed when an administrator views the System...

CVE-2024-34070

Froxlor is open source server administration software. Prior to 2.1.9, a Stored Blind Cross-Site Scripting XSS vulnerability was identified in the Failed Login Attempts Logging Feature of the Froxlor Application. An unauthenticated User can inject malicious scripts in the loginname parameter on t...

PT-2020-19305

Name of the Vulnerable Software and Affected Versions PCS DEXICON version 3.4.1 Description The issue allows for XSS via the loginName parameter in the "login action.jsp" endpoint. Recommendations For PCS DEXICON version 3.4.1, consider restricting access to the loginName parameter in the "login...

CVE-2020-6956: Improper Neutralization of Input During Web Page Generation

PCS DEXICON 3.4.1 allows XSS via the loginName parameter in loginaction.jsp...

PT-2018-13534

Name of the Vulnerable Software and Affected Versions e107 version 2.1.8 Description The issue allows for XSS via the "e107 admin/users.php?mode=main&action=list" API endpoint, specifically through the user loginname parameter. Recommendations For e107 version 2.1.8, update to a version that fixe...

Cross site scripting

ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java...

CVE-2018-11012

ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java...

CVE-2018-11012

ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java...

CVE-2018-11012

ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java...

CVE-2018-11012: Improper Neutralization of Input During Web Page Generation

ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java...