CVE-2024-10840

The CVE-2024-10840 entry concerns romadebrian WEB-Sekolah 1.0, specifically the Backend file /Admin/akun_edit.php. The vulnerability arises from unsafely handling the argument kode, enabling cross-site scripting (XSS) that can be triggered remotely. Multiple sources corroborate the same issue, wi...

CVE-2024-9007 jeanmarc77 123solar detailed.php cross site scripting

A vulnerability classified as problematic has been found in jeanmarc77 123solar 1.8.4.5. This affects an unknown part of the file /detailed.php. The manipulation of the argument date1 leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2024-6058

CVE-2024-6058 affects LabVantage LIMS 2017. A cross-site scripting (XSS) vulnerability exists in an unknown part of the file access path: /labvantage/rc?command=page&page=SampleHistoricalList&_iframename=list&__crc=crc_1701669816260. The vulnerability is triggered by manipulating height/width par...

CVE-2015-10129 planet-freo auth.inc.php comparison

A vulnerability was found in planet-freo up to 20150116 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/inc/auth.inc.php. The manipulation of the argument auth leads to incorrect comparison. The attack may be launched remotely. The complexity ...

CVE-2024-0503 code-projects Online FIR System registercomplaint.php cross site scripting

A vulnerability was found in code-projects Online FIR System 1.0. It has been classified as problematic. This affects an unknown part of the file registercomplaint.php. The manipulation of the argument Name/Address leads to cross site scripting. It is possible to initiate the attack remotely. The...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in yproject RuoYi up to 4.7.7. Affected by this issue is the function uploadFilesPath of the component File Upload. The manipulation of the argument originalFilenames leads to cross site scripting. The attack may be launched...

CVE-2014-125066 emmflo yuko-bot denial of service

A vulnerability was found in emmflo yuko-bot. It has been declared as problematic. This vulnerability affects unknown code. The manipulation of the argument title leads to denial of service. The attack can be initiated remotely. The name of the patch is e580584b877934a4298d4dd0c497c79e579380d0. I...