3326 matches found
XWiki Platform 跨站脚本漏洞
XWiki Platform is a suite of Wiki platforms for creating web collaboration applications from the XWiki Foundation in France. A security vulnerability exists in XWiki Platform 5.4.4 and earlier versions, which stems from a stored cross-site scripting XSS vulnerability in the name parameter...
VulnCheck KEV: CVE-2023-27639
An issue was discovered in the tshirtecommerce aka Custom Product Designer component 2.1.4 for PrestaShop. An HTTP request can be forged with the POST parameter filename in the tshirtecommerce/ajax.php?type=svg endpoint, to allow a remote attacker to traverse directories on the system in order...
PT-2023-22381 · Sourcecodester · Students Online Internship Timesheet System
Name of the Vulnerable Software and Affected Versions: SourceCodester Students Online Internship Timesheet System version 1.0 Description: A problematic issue has been found, affecting some unknown functionality of the file "/ajax.php?action=save company". The manipulation of the name argument wi...
CVE-2023-33751
A stored cross-site scripting XSS vulnerability in mipjz v5.0.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter at /app/tag/controller/ApiAdminTagCategory.php...
Cross site scripting
A stored cross-site scripting XSS vulnerability in mipjz v5.0.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter at /app/tag/controller/ApiAdminTagCategory.php...
CVE-2023-33751
A stored cross-site scripting XSS vulnerability in mipjz v5.0.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter at /app/tag/controller/ApiAdminTagCategory.php...
PT-2023-21097 · Sourcecodester · Sourcecodester Guest Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Guest Management System version 1.0 Description: A problematic issue has been found in the file dateTest.php of the component GET Parameter Handler. The manipulation of the name argument leads to cross-site scripting. The attac...
CVE-2023-2691
A vulnerability, which was classified as problematic, was found in SourceCodester Personnel Property Equipment System 1.0. Affected is an unknown function of the file admin/additem.php of the component POST Parameter Handler. The manipulation of the argument itemname leads to cross site scripting...
PT-2023-20848 · Sourcecodester · Sourcecodester Computer Laboratory Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester ICT Laboratory Management System version 1.0 Description: A vulnerability has been found in the SourceCodester ICT Laboratory Management System, affecting an unknown functionality of the file views/room info.php of the componen...
SourceCodester Personnel Property Equipment System 跨站脚本漏洞
Personnel Property Equipment System is a personnel property equipment management system by Jon Remus Sevellejo personal developer. A cross-site scripting vulnerability exists in Personnel Property Equipment System v1.0, which stems from the lack of effective filtering and escaping of user-supplie...
PT-2023-20842 · Sourcecodester · Sourcecodester Personnel Property Equipment System
Name of the Vulnerable Software and Affected Versions: SourceCodester Personnel Property Equipment System version 1.0 Description: A problematic vulnerability was found in the SourceCodester Personnel Property Equipment System. The issue affects an unknown function of the file admin/add item.php,...
The vulnerability in the “classes/Master.php?f=save_field” script of the CMS system’s administration panel for the Mobile Comparison Website allows a perpetrator to perform cross-site scripting attacks.
The vulnerability in the classes/Master.php?f=savefield script of the CMS system’s administration panel for the Mobile Comparison Website is related to insufficient protection of the website structure when processing the Field Name argument. Exploiting this vulnerability allows an attacker to...
MonicaHQ 跨站脚本漏洞
MonicaHQ is a relationship management system from MonicaHQ, Inc. A security vulnerability exists in MonicaHQ version 4.0.0, which can be exploited by a remote attacker to execute malicious code in the application via the people:id/relationships endpoint and CSTIs in the firstname and lastname...
Pimcore name parameter cross-site scripting vulnerability
Pimcore is Austria Pimcore company's set of open source for creating and managing Web applications Web content management platform. The platform integrates Web content management, e-commerce framework and product information management applications. A cross-site scripting vulnerability exists in...
Control iD RHiD 跨站脚本漏洞
Control iD RHiD is a complete system from Control iD that allows point computing in the cloud. A cross-site scripting vulnerability exists in Control iD RHiD version 23.3.19.0, which stems from incorrect manipulation of the parameter Name resulting in cross-site scripting...
PT-2023-19498 · Sourcecodester · Sourcecodester Simple Student Information System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Student Information System version 1.0 Description: A problematic issue was found in the system, affecting the /classes/Master.php?f=save course component of the Add New Course feature. The manipulation of the name...
CVE-2023-2382
A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. Affected by this issue is some unknown functionality of the file scgi-bin/platform.cgi?page=firewalllogsemail.htm of the component Web Management Interface. The manipulation of the argument...
Stored cross site scripting on API integration
Concrete CMS previously concrete5 before 9.2 is vulnerable to stored XSS on API Integrations via the name parameter...
