PT-2020-19378

Name of the Vulnerable Software and Affected Versions ClearPass versions prior to 6.7.13 ClearPass versions prior to 6.8.4 ClearPass versions prior to 6.9.0 Description The issue allows a malicious administrator, or a compromised administrator account, to save malicious scripts within ClearPass...

CVE-2020-11629

An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. The External Command Certificate Validator, which allows administrators to upload external linters to validate certificates, is supposed to save uploaded test certificates to the server. An attacker who has gained access to...

Design/Logic Flaw

An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. The External Command Certificate Validator, which allows administrators to upload external linters to validate certificates, is supposed to save uploaded test certificates to the server. An attacker who has gained access to...

PrimeKey Solutions EJBCA Code Issue Vulnerability (CNVD-2020-22248)

PrimeKey Solutions EJBCA is a software PKI certificate authority package from PrimeKey Solutions, Sweden. A security vulnerability exists in PrimeKey Solutions EJBCA versions prior to 6.15.2.6 and 7.x versions prior to 7.3.1.2. An attacker could exploit the vulnerability to upload malicious scrip...

CVE-2020-11629

An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. The External Command Certificate Validator, which allows administrators to upload external linters to validate certificates, is supposed to save uploaded test certificates to the server. An attacker who has gained access to...

115CMS suffers from XSS vulnerability

115CMS is a content management system developed with ThinkPHP framework. 115CMS suffers from an XSS vulnerability that can be exploited by attackers to execute malicious scripts and obtain administrator cookies...

Cross-site Scripting (XSS)

sockjs is vulnerable to cross-site scripting XSS. The attack exists because it does sanitize the callback parameter in lib/transport/htmlfile.js for non-alphanumeric symbols, allowing an attacker to inject malicious scripts...

CVE-2020-5844

index.php?sec=godmode/extensions&sec2=extensions/filesrepo in Pandora FMS v7.0 NG allows authenticated administrators to upload malicious PHP scripts, and execute them via base64 decoding of the file location. This affects v7.0NG.742FIXPERL2020...

PT-2020-12194

Name of the Vulnerable Software and Affected Versions PrimeFaces version 7.0.11 Description A cross-site scripting XSS issue was discovered in the tooltip/tooltip.js component of PrimeFaces. This issue allows an attacker to provide JavaScript code in an input field, which is later used as a toolt...

SAP Fiori Cross-Site Scripting Vulnerability

SAP Fiori is a content management system. A cross-site scripting vulnerability exists in SAP Fiori, which can be exploited by an attacker to execute malicious scripts...

PT-2020-7888

Name of the Vulnerable Software and Affected Versions: HikaShop Joomla Component versions prior to 2.6.0 Description: The issue is related to a Cross-Site Scripting XSS vulnerability, which occurs when an injected payload is used. This allows for the execution of malicious scripts. The estimated...

Cross-Site Scripting (XSS)

@instructure/ui-elements is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to lack of proper truncation of texts in argument Text in 'Truncator.js' , allowing an attacker to inject malicious scripts...

DotNetNuke 9.5 - Persistent Cross-Site Scripting

Exploit Title: DotNetNuke 9.5 - Persistent Cross-Site Scripting Date: 2020-02-23 Exploit Author: Sajjad Pourali Vendor Homepage: http://dnnsoftware.com/ Software Link: https://github.com/dnnsoftware/Dnn.Platform/releases/download/v9.5.0/DNNPlatform9.5.0Install.zip Version: . For instance, uploadi...

CVE-2020-6193

SAP NetWeaver Knowledge Management ICE Service, versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to execute malicious scripts leading to Reflected Cross-Site Scripting XSS vulnerability...

CVE-2020-6193: Improper Neutralization of Input During Web Page Generation

SAP NetWeaver Knowledge Management ICE Service, versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to execute malicious scripts leading to Reflected Cross-Site Scripting XSS vulnerability...

PT-2020-7104

Name of the Vulnerable Software and Affected Versions Mambo CMS versions through 4.6.5 Description The issue concerns multiple cross-site scripting XSS flaws. Cross-site scripting is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially...

XSS Vulnerability in Tuan Ah VIP Movie System

Group ah VIP movie system is a lightweight and intelligent video CMS management system. A XSS vulnerability exists in Tuan Ah VIP Movie System, which can be exploited by attackers to execute malicious scripts...

PT-2020-7091

Name of the Vulnerable Software and Affected Versions Smoothwall Express version 3 Description A cross-site scripting XSS issue affects the software, potentially allowing malicious scripts to be executed. Recommendations For Smoothwall Express version 3, update to a version that includes a fix fo...

PT-2020-7078

Name of the Vulnerable Software and Affected Versions PmWiki versions prior to 2.2.21 Description The issue is related to a cross-site scripting XSS problem. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to...

PT-2020-7090

Name of the Vulnerable Software and Affected Versions PHPShop versions prior to 0.8.2 Description The issue is related to a Cross-Site Scripting XSS problem. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to...