31 matches found
CVE-2021-46068
CVE-2021-46068 Название эксплойта: Vehicle Service Management System — хранимая межсайтовая XSS-уязвимость в разделе «MyAccount» Stored Cross Site Scripting Автор эксплойта: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIUM Ссылки:...
Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS
CVE-2021-46068 익스플로잇 제목: Vehicle Service Management System - 'MyAccount' 저장형 크로스 사이트 스크립팅 XSS 익스플로잇 작성자: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIUM 참고 자료: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss...
GHSA-MPMW-F6H6-3G26 Winter: My Account preview exposes another backend user's profile by record ID
Impact Backend\Controllers\MyAccount, introduced in v1.2.13, declares an empty $requiredPermissions array so that any authenticated backend user can manage their own account. It implements the FormController behavior, which exposes three routable actions — create, update and preview — that each...
CVE-2019-16195
Centreon before 2.8.30, 18.x before 18.10.8, and 19.x before 19.04.5 allows XSS via myAccount alias and name fields...
Malicious code in telus-myaccount-cli (npm)
The package telus-myaccount-cli was found to contain malicious code...
MAL-2025-34674 Malicious code in telus-myaccount-cli (npm)
The package telus-myaccount-cli was found to contain malicious code...
How to Merge Veeam Backup for Microsoft 365 Licenses
Purpose This article documents the process for merging and unmerging licenses for Veeam Backup for Microsoft 365 using the Veeam MyAccount Portal. Note: Merging licenses creates a new license file from two or more contract licenses. This process can be performed by the customer using the Veeam...
CVE-2022-37250
Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting XSS in /admin/myaccount...
Pixel＆tonic Craft CMS 跨站脚本漏洞
Pixel & tonic Craft CMS is a content management system CMS from the US company Pixel & tonic. A cross-site scripting vulnerability exists in Craft CMS version 4.2.0.1, which stems from a security issue on the /admin/myaccount page...
qdPM 9.1 - Remote Code Execution (Authenticated) Exploit
Exploit Title: qdPM 9.1 - Remote Code Execution RCE Authenticated Google Dork: intitle:qdPM 9.1. Copyright © 2020 qdpm.net Original Exploit Author: Rishal Dwivedi Loginsoft Original ExploitDB ID: 47954 https://www.exploit-db.com/exploits/47954 Exploit Author: Leon Trappett thepcn3rd Vendor...
CVE-2022-26180
qdPM 9.2 allows Cross-Site Request Forgery CSRF via the index.php/myAccount/update URI...
CVE-2022-26180
qdPM 9.2 allows Cross-Site Request Forgery CSRF via the index.php/myAccount/update URI...
Cross site request forgery (csrf)
qdPM 9.2 allows Cross-Site Request Forgery CSRF via the index.php/myAccount/update URI...
CVE-2022-26180
qdPM 9.2 allows Cross-Site Request Forgery CSRF via the index.php/myAccount/update URI...
CVE-2022-26180
The CVE-2022-26180 describes a CSRF vulnerability in qdPM 9.2 that can be exploited via the index.php/myAccount/update URI due to lack of CSRF token validation. Impact is high (C/H/I/A = High) with CVSS 3.1 base score 8.8; basic user interaction required (per the NVD entry). Exploitation details ...
myaccount-cloud.com Cross Site Scripting vulnerability OBB-2319831
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Veeam My Account Sign In FAQ
Below are the most commonly asked questions. Click to expand Which email should I use to log in to the Veeam My Account Portal? You should use your email associated with the company you work with. If you have worked with Veeam Support before, search through your email client to see which email...
CVE-2019-16195
Centreon before 2.8.30, 18.x before 18.10.8, and 19.x before 19.04.5 allows XSS via myAccount alias and name fields...