CVE-2024-33328

CVE-2024-33328: LumisXP/Lumisxp versions 15.0.x–16.1.x have a cross-site scripting (XSS) vulnerability in the main.jsp component. The issue allows injection of arbitrary web scripts/HTML via the pageId parameter, as described across multiple sources (Red Hat, NVD, CNVD, PacketStorm, CVE records)....

CVE-2015-3422

CVE-2015-3422 is a real XSS vulnerability in SearchBlox up to 8.2.1 where input passed via the GET parameter menu2 to /searchblox/admin/main.jsp is not properly sanitized. The issue allows injection of arbitrary HTML/JavaScript that can execute in a logged-in administrator’s browser, typically by...

TRS 6.5 /wcm/app/main.jsp 登录绕过漏洞

No description provided by source...