EUVD-2021-20843

Malware in sbrugna...

CVE-2024-12933

A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file updateItemController.php. The manipulation of the argument pname/pdesc leads to cross site scripting. The attack may be launched...

CVE-2024-12933: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file updateItemController.php. The manipulation of the argument pname/pdesc leads to cross site scripting. The attack may be launched...

TomExam Cross-Site Scripting Vulnerability

TomExam is a free and efficient online exam system software. TomExam version 3.0 suffers from a cross-site scripting XSS vulnerability that can be exploited by an attacker to cause cross-site scripting XSS via the pname parameter passed to list.thtml...

CVE-2021-34181

Cross Site Scripting XSS vulnerability in TomExam 3.0 via pname parameter to list.thtml...

Cross site scripting

Cross Site Scripting XSS vulnerability in TomExam 3.0 via pname parameter to list.thtml...

CVE-2021-34181: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in TomExam 3.0 via pname parameter to list.thtml...

CVE-2021-34181

Cross Site Scripting XSS vulnerability in TomExam 3.0 via pname parameter to list.thtml...

CVE-2021-34181

The connected documents confirm CVE-2021-34181 is a Cross Site Scripting (XSS) vulnerability in TomExam 3.0 exploitable via the p_name parameter passed to list.thtml. The root cause is an input handling/output encoding weakness that allows script injection. Affected software is TomExam 3.0; no ex...

CVE-2021-21970

An out-of-bounds write vulnerability exists in the HandleSeaCloudMessage functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. The HandleIncomingSeaCloudMessage function uses at 3 the jsonobjectgetstring to populate the pname global variable. The pname is only 0x80 bytes long, and the...

CVE-2015-9392

The users-ultra plugin before 1.5.63 for WordPress has XSS via the pname parameter...

Design/Logic Flaw

The users-ultra plugin before 1.5.63 for WordPress has XSS via the pname parameter...

CVE-2015-9392

The users-ultra plugin before 1.5.63 for WordPress has XSS via the pname parameter...

CVE-2015-9392: Improper Neutralization of Input During Web Page Generation

The users-ultra plugin before 1.5.63 for WordPress has XSS via the pname parameter...

CVE-2018-7469: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Entrepreneur Job Portal Script 2.0.9 has XSS via the pname aka Edit Category Name field to admin/categoriesindustry.php aka Categories - Industry Type...