Cross site scripting

A stored cross site scripting XSS vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Username' parameter...

CVE-2020-25879

A stored cross site scripting XSS vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Username' parameter...

CVE-2020-25879

CVE-2020-25879 is a stored XSS vulnerability in Codoforum v5.0.2, exploitable via the Username field in the Manage Users feature. An authenticated attacker can inject and execute arbitrary scripts/HTML. The CVSS data in the initial document shows a base score of 5.4 (CVSS‑3.1) with Network access...

CVE-2020-25879: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Username' parameter...

Codoforum 跨站脚本漏洞

Codoforum is a set of PHP and MySQL based forum software. A cross-site scripting vulnerability exists in Codoforum version 5.0.2, which can be exploited by an authenticated attacker to execute arbitrary web script or HTML via a crafted payload with the "Manage Users" parameter...

PT-2021-11199

Name of the Vulnerable Software and Affected Versions: Codoforum version 5.0.2 Description: A stored cross site scripting issue in the 'Manage Users' feature allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Username parameter...

CVE-2021-30167

The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to control the devices...

CVE-2021-30167: Insufficiently Protected Credentials

The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to control the devices...

Egavilanmedia User Registration & Login System 跨站脚本漏洞

Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A cross-site scripting vulnerability exists in EGavilanMedia User Registration and Login System With Admin Panel version 1.0, which can be exploited by an attacker to...

Nagios XI Cross-Site Scripting Vulnerability (CNVD-2020-63970)

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. A cross-site scripting vulnerability exists in the "Manage Users" username field in Nagios XI versions prior to 5.7.5. No details of t...

CVE-2020-27988

Nagios XI before 5.7.5 is vulnerable to XSS in Manage Users Username field...

CVE-2020-27988

Nagios XI before 5.7.5 is vulnerable to XSS in Manage Users Username field...

Design/Logic Flaw

Nagios XI before 5.7.5 is vulnerable to XSS in Manage Users Username field...

CVE-2020-27988

Nagios XI before 5.7.5 is vulnerable to XSS in Manage Users Username field...

CVE-2020-27988

Nagios XI before 5.7.5 is vulnerable to a Cross-Site Scripting issue in the Manage Users (Username field). The CNVD entry confirms the affected product/version set (Nagios XI prior to 5.7.5) and the vulnerability class (XSS), but the provided documents do not include remediation details or exploi...

Nagios XI 跨站脚本漏洞

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. A cross-site scripting vulnerability exists in the "Manage Users" username field in Nagios XI versions prior to 5.7.5. No details of t...

CVE-2020-27988: Improper Neutralization of Input During Web Page Generation

Nagios XI before 5.7.5 is vulnerable to XSS in Manage Users Username field...

PT-2020-16891

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 5.7.5 Description The issue is related to a Cross-Site Scripting XSS vulnerability in the Manage Users section, specifically affecting the Username field. This allows for potential malicious script injection...

Nagios XI 'Manage Users' SQL Injection Vulnerability

Nagios XI is an IT infrastructure monitoring solution. The solution supports monitoring and alerting of applications, services, operating systems and more. A SQL injection vulnerability exists in Nagios XI 'Manage Users'. An attacker can exploit this vulnerability to execute illegal SQL commands...

Nagios XI 5.7.3 SQL Injection

Exploit Title: Nagios XI 5.7.3 - 'Manage Users' Authenticated SQL Injection Date: 10-18-2020 Exploit Author: Matthew Aberegg Vendor Homepage: https://www.nagios.com/products/nagios-xi/ Vendor Changelog: https://www.nagios.com/downloads/nagios-xi/change-log/ Software Link:...