57 matches found
CVE-2022-32118
CVE-2022-32118 - Arox-XSS Arox School ERP Pro 애플리케이션의 여러 페이지로그인 페이지 포함에 저장형 및 반사형 교차 사이트 스크립팅 취약점이 존재하여 임의의 JavaScript 명령을 실행할 수 있습니다. 애플리케이션에는 교차 사이트 스크립팅에 영향을 받는 매개변수가 더 많이 있지만 아래는 일부 샘플입니다. 저장형 XSS 취약 페이지: localhost/officeadmin/?pid=74&action=dispatchcategoryedit&id=3...
CVE-2021-38583
CVE-2021-38583 openBaraza HCM HR Payroll v.3.1.6 반사형 XSS 취약점 openBaraza HCM HR Payroll v.3.1.6은 사용자가 제어할 수 있는 입력을 적절히 처리하지 않아 여러 페이지에서 반사형 크로스 사이트 스크립팅XSS 취약점이 발생합니다. https://openbaraza.org https://sourceforge.net/projects/obhrms/?source=directory 취약한 페이지: http://serverip:9090/hr/subscription.jsp...
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: f2fs: compress: fixed to avoid a use-after-free condition on dic. Call trace: memcpy+0x128/0x250 f2fsreadmultipages+0x940/0xf7c f2fsmpagereadpages+0x5a8/0x624 f2fsreadahead+0x5c/0x110 pagecacheraunbounded+0x1b8/0x590...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989294)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989294 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: pgalloc: fix memory leak caused by pgdfree pgd page is freed by generic implementation...
EUVD-2021-18786
Malware in sbrugna...
CVE-2021-38583
openBaraza HCM 3.1.6 does not properly neutralize user-controllable input, which allows reflected cross-site scripting XSS on multiple pages: hr/subscription.jsp and hr/application.jsp and and hr/index.jsp with view= and data=...
CVE-2021-26776
CSZ CMS 1.2.9 is affected by a cross-site scripting XSS vulnerability in multiple pages through the field name...
CVE-2024-47325: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeisle MPG multiple-pages-generator-by-porthas allows SQL Injection.This issue affects MPG: from n/a through = 3.4.7...
CVE-2024-31971
Multiple stored cross-site scripting XSS vulnerabilities on AdTran NetVanta 3120 18.01.01.00.E devices allow remote attackers to inject arbitrary JavaScript, as demonstrated by /mainPassword.html, /processIdentity.html, /public.html, /dhcp.html, /private.html, /hostname.html, /connectivity.html,...
CVE-2023-33927
A vulnerability in Themeisle MPG multiple-pages-generator-by-porthas.This issue affects MPG: from n/a through = 3.3.19...
Cross-site Scripting (XSS)
hoteldruid is vulnerable to Cross-site Scripting XSS. The vulnerability which exists in multiple pages allows a malicious attacker to execute arbitrary commands within the surname, name and nickname document functions...
Advanced Database Cleaner < 3.1.1 - Reflected Cross-Site Scripting
The plugin does not escape numerous generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting https://example.com/wp-admin/admin.php?page=advanceddbcleaner&aDBctab=cron&aDBccat=all&"alert/XSS/ Other pages are affected...
3D Print Lite < 1.9.1.6 - Reflected Cross-Site Scripting
Description The plugin does not sanitise and escape some user input before outputting it back in attributes, leading to Reflected Cross-Site Scripting issues https://example.com/wp-admin/admin.php?page=p3dlitematerials&materialtext="alert/XSS/...
IceHrm 跨站脚本漏洞
IceHrm is a human resource management Hrm system that includes features such as employee management, leave management, and payroll. The system includes functions such as employee management, leave management and payroll management.IceHrm has security vulnerabilities on several pages that could be...
Pharmacy Point Of Sale System 1.0 SQL Injection
Exploit Title: Pharmacy Point of Sale System 1.0 - 'Multiple' SQL Injection SQLi Date: 28.09.2021 Exploit Author: Murat Vendor Homepage: https://www.sourcecodester.com/php/14957/pharmacy-point-sale-system-using-php-and-sqlite-free-source-code.html Software Link:...
CVE-2021-38583
openBaraza HCM 3.1.6 does not properly neutralize user-controllable input, which allows reflected cross-site scripting XSS on multiple pages: hr/subscription.jsp and hr/application.jsp and and hr/index.jsp with view= and data=...
CVE-2021-38583
openBaraza HCM 3.1.6 does not properly neutralize user-controllable input, which allows reflected cross-site scripting XSS on multiple pages: hr/subscription.jsp and hr/application.jsp and and hr/index.jsp with view= and data=...
openBaraza HCM 跨站脚本漏洞
openBaraza HCM is a comprehensive HR and Talent Management software solution that encompasses not only traditional core HR functionality, but also key aspects of Talent Management. A security vulnerability exists in openBaraza HCM version 3.1.6 that stems from not properly neutralizing...