EUVD-2021-14100

Malware in sbrugna...

VulnCheck KEV: CVE-2020-15568

TerraMaster TOS before 4.1.29 has Invalid Parameter Checking that leads to code injection as root. This is a dynamic class method invocation vulnerability in include/exportUser.php, in which an attacker can trigger a call to the exec method with for example OS commands in the opt parameter...

CVE-2021-27340

OpenSIS Community Edition version = 7.6 is affected by a reflected XSS vulnerability in EmailCheck.php via the "opt" parameter...

CVE-2021-27340

OpenSIS Community Edition version = 7.6 is affected by a reflected XSS vulnerability in EmailCheck.php via the "opt" parameter...

PT-2021-17403

Name of the Vulnerable Software and Affected Versions OpenSIS Community Edition versions prior to 7.7 Description The issue is related to a reflected XSS vulnerability in the EmailCheck.php file, specifically via the opt parameter. This allows for potential exploitation. Recommendations For OpenS...

CVE-2021-27340: Improper Neutralization of Input During Web Page Generation

OpenSIS Community Edition version = 7.6 is affected by a reflected XSS vulnerability in EmailCheck.php via the "opt" parameter...

CVE-2020-15568: Improper Control of Dynamically-Managed Code Resources

TerraMaster TOS before 4.1.29 has Invalid Parameter Checking that leads to code injection as root. This is a dynamic class method invocation vulnerability in include/exportUser.php, in which an attacker can trigger a call to the exec method with for example OS commands in the opt parameter...

CVE-2020-28187: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in TerraMaster TOS = 4.2.06 allow remote authenticated attackers to read, edit or delete any file within the filesystem via the 1 filename parameter to /tos/index.php?editor/fileGet, Event parameter to /include/ajax/logtable.php, or opt parameter to...

PT-2020-14498

Name of the Vulnerable Software and Affected Versions TerraMaster TOS versions prior to 4.1.29 Description The issue is related to Invalid Parameter Checking, which leads to code injection as root. This is a dynamic class method invocation vulnerability in the include/exportUser.php file. An...

CVE-2008-3340

Cross-site scripting XSS vulnerability in searchresult.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable possibly the opt parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in searchresult.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable possibly the opt parameter...

CVE-2008-3340: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in searchresult.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable possibly the opt parameter...