PT-2026-7709

Name of the Vulnerable Software and Affected Versions SpotIM version 2.2 Description A denial of service issue allows attackers to crash the application by inputting a large buffer into the registration name field. This is achieved by providing a 1000-character payload in the Name field...

OURPHP 安全漏洞

OURPHP is OURPHP open source an open source, cross-platform, enterprise-level + e-commerce + applet + APP multi-terminal synchronization CMS station building system. A security vulnerability exists in OURPHP 8.6.1 and previous versions, which stems from improper neutralization of Name field input...

CVE-2023-33794

A stored cross-site scripting XSS vulnerability in the Create Tenants /tenancy/tenants/ function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

CVE-2020-6583

BigProf Online Invoicing System OIS through 2.6 has XSS that can be leveraged for session hijacking. An attacker can exploit the XSS vulnerability, retrieve the session cookie from the administrator login, and take over the administrator account via the Name field in an Add New Client action...