3322 matches found
CVE-2024-31648
Cross Site Scripting XSS in Insurance Management System v1.0, allows remote attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter at /core/newcategory2...
CVE-2024-31649
A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...
CVE-2024-31650
A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter...
CVE-2024-31648
Cross Site Scripting XSS in Insurance Management System v1.0, allows remote attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter at /core/newcategory2...
Cosmetics and Beauty Product Online Store 安全漏洞
Cosmetics And Beauty Product Online Store is an online store for cosmetics and beauty products from the individual developer Carlo Montero. A security vulnerability exists in Cosmetics and Beauty Product Online Store v1.0, which originates from a cross-site scripting vulnerability in the First Na...
CVE-2024-31651
A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter...
CVE-2024-31648
Cross Site Scripting XSS in Insurance Management System v1.0, allows remote attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter at /core/newcategory2...
CVE-2024-31651
CVE-2024-31651 describes a cross-site scripting (XSS) vulnerability in the Cosmetics and Beauty Product Online Store v1.0. The issue arises from unsanitized input in the irst Name parameter, enabling an attacker to inject and execute arbitrary web scripts or HTML in the victim00. Documents con...
CVE-2024-31649
A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...
CVE-2024-31650
A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter...
Cosmetics and Beauty Product Online Store 安全漏洞
Cosmetics And Beauty Product Online Store is an online store for cosmetics and beauty products from the individual developer Carlo Montero. A security vulnerability exists in Cosmetics and Beauty Product Online Store v1.0, which originates from a cross-site scripting vulnerability in the Product...
CVE-2024-31650
CVE-2024-31650 describes a cross-site scripting (XSS) vulnerability in the Cosmetics and Beauty Product Online Store v1.0. The flaw is triggered through a crafted payload in the Last Name parameter, allowing arbitrary web scripts/HTML execution. The NVD entry reports a CVSSv3.1 base score of 9.6 ...
CVE-2024-31648
CVE-2024-31648 describes a cross-site scripting (XSS) vulnerability in Insurance Management System v1.0. The issue allows remote attackers to inject arbitrary web scripts or HTML via the Category Name parameter at /core/new_category2, enabling attacker-controlled script execution in the victim’s ...
CVE-2024-31650
A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter...
CVE-2024-31651
A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter...
Cosmetics and Beauty Product Online Store 安全漏洞
Cosmetics And Beauty Product Online Store is an online store for cosmetics and beauty products by Carlo Montero, an individual developer. A security vulnerability exists in Cosmetics and Beauty Product Online Store v1.0, which originates from a cross-site scripting vulnerability in the Last Name...
CVE-2024-31649
CVE-2024-31649 is a cross-site scripting (XSS) vulnerability in Cosmetics and Beauty Product Online Store v1.0. The flaw allows an attacker to execute arbitrary web scripts or HTML by injecting a crafted payload into the Product Name parameter. Public sources consistently describe the affected so...
TOTOLINK EX200 setUpgradeFW Method Code Execution Vulnerability
TOTOLINK EX200 is a wireless N range extender from China Gion Electronics TOTOLINK , which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. A code execution vulnerability exists in the TOTOLINK EX200, which stems from the FileName...
PT-2024-26403 · Unknown · Campcodes Online Event Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Online Event Management System version 1.0 Description: A problematic issue has been found in the system, affecting the processing of the file /views/process.php. The manipulation of the name argument leads to cross-site scripting...