3550 matches found
Cross site scripting
Cross Site Scripting XSS vulnerability in Booking Core - Ultimate Booking System Booking Core 1.7.0 via the 1 "About Yourself” section under the “My Profile” page, " 2 “Hotel Policy” field under the “Hotel Details” page, 3 “Pricing code” and “name” fields under the “Manage Tour” page, and 4 all t...
CVE-2020-25444
Cross Site Scripting XSS vulnerability in Booking Core - Ultimate Booking System Booking Core 1.7.0 via the 1 "About Yourself” section under the “My Profile” page, " 2 “Hotel Policy” field under the “Hotel Details” page, 3 “Pricing code” and “name” fields under the “Manage Tour” page, and 4 all t...
CVE-2020-25444
CVE-2020-25444 affects Booking Core – Ultimate Booking System (Booking Core) version 1.7.0. The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable via multiple input points: the My Profile page’s About Yourself section, Hotel Details’ Hotel Policy field, Manage Tour’s Pricing code and...
CVE-2020-25879
A stored cross site scripting XSS vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Username' parameter...
CVE-2020-25879
A stored cross site scripting XSS vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Username' parameter...
Cross site scripting
A stored cross site scripting XSS vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Username' parameter...
CVE-2020-25879
CVE-2020-25879 is a stored XSS vulnerability in Codoforum v5.0.2, exploitable via the Username field in the Manage Users feature. An authenticated attacker can inject and execute arbitrary scripts/HTML. The CVSS data in the initial document shows a base score of 5.4 (CVSS‑3.1) with Network access...
CVE-2020-25879
A stored cross site scripting XSS vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Username' parameter...
Samsung KCS License Issue Vulnerability
Samsung KCS is a Knox cloud service from Samsung in South Korea. A security vulnerability exists in KCS versions prior to 1.39, which stems from an improper MDM policy management vulnerability in the KME module that can be exploited by an attacker to bypass Knox Manage authentication...
Codoforum 跨站脚本漏洞
Codoforum is a set of PHP and MySQL based forum software. A cross-site scripting vulnerability exists in Codoforum version 5.0.2, which can be exploited by an authenticated attacker to execute arbitrary web script or HTML via a crafted payload with the "Manage Users" parameter...
Zoo Management System 1.0 - (Multiple) Stored Cross-Site-Scripting Vulnerability
Exploit Title: Zoo Management System 1.0 - 'Multiple' Stored Cross-Site-Scripting XSS Exploit Author: Subhadip Nag Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/zoo-management-system-using-php-and-mysql/ Version: 1.0 Tested on: Server: XAMPP Description Zoo...
CVE-2021-25442
Improper MDM policy management vulnerability in KME module prior to KCS version 1.39 allows MDM users to bypass Knox Manage authentication...
Authentication flaw
Improper MDM policy management vulnerability in KME module prior to KCS version 1.39 allows MDM users to bypass Knox Manage authentication...
CVE-2021-25442
CVE-2021-25442 describes an improper MDM policy management vulnerability in Samsung Knox Manage (KME) module prior to KCS version 1.39. The flaw allows MDM users to bypass Knox Manage authentication due to policy handling weaknesses within KME. Affected: Knox Cloud Service (KCS) KME module, pre-1...
CVE-2021-25442
Improper MDM policy management vulnerability in KME module prior to KCS version 1.39 allows MDM users to bypass Knox Manage authentication...
Samsung KCS授权问题漏洞
Samsung KCS is a Knox cloud service from Samsung in South Korea. A security vulnerability exists in KCS versions prior to 1.39, which stems from an improper MDM policy management vulnerability in the KME module that can be exploited by an attacker to bypass Knox Manage authentication...
CVE-2020-22251
Cross Site Scripting XSS vulnerability in phpList 3.5.3 via the login name field in Manage Administrators when adding a new admin...
Cross site scripting
Cross Site Scripting XSS vulnerability in phpList 3.5.3 via the login name field in Manage Administrators when adding a new admin...
CVE-2020-22251
CVE-2020-22251 is a Cross Site Scripting (XSS) vulnerability in phpList 3.5.3 exploitable via the login name field when adding a new administrator in Manage Administrators. Multiple connected sources corroborate the issue, describing an XSS condition arising from insufficient input handling on th...