26 matches found
WSO2 Management Console 跨站脚本漏洞
WSO2 Management Console is an application from WSO2 USA, Inc. A management console. A cross-site scripting vulnerability exists in WSO2 Management Console through 5.10 that allows XSS via the carbon admin login.jsp msgId parameter...
PT-2021-10086 · Wso2 · Wso2 Management Console
Name of the Vulnerable Software and Affected Versions: WSO2 Management Console versions through 5.10 Description: The issue allows for cross-site scripting XSS attacks via the msgId parameter in the carbon/admin/login.jsp page. This can potentially lead to privilege escalation. There have been...
Sql injection
SQL injection vulnerability in index.php in Pictures Rating Picture Rating allows remote attackers to execute arbitrary SQL commands via the msgid parameter...
CVE-2007-3881
CVE-2007-3881 describes an SQL injection in index.php of Pictures Rating (Picture Rating). The vulnerability is exploitable via the msgid parameter, allowing remote attackers to execute arbitrary SQL commands. The associated metrics show a high base score (7.5, NETWORK attack vector, no authentic...