PT-2024-21734 · Unknown · Campcodes Complete Online Dj Booking System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Online DJ Booking System version 1.0 Description: A problematic issue was found in the system, affecting an unknown functionality of the file /admin/aboutus.php. The manipulation of the pagetitle argument leads to cross-sit...

PT-2019-10204

Name of the Vulnerable Software and Affected Versions: MODX Revolution versions prior to v2.8.0, specifically versions through v2.7.0-pl Description: The issue allows for XSS attacks via a document resource, such as pagetitle, which is mishandled during certain actions like Update, Quick Edit, or...

CVE-2017-9070

In MODX Revolution before 2.5.7, a user with resource edit permissions can inject an XSS payload into the title of any post via the pagetitle parameter to connectors/index.php...

CVE-2017-9070

In MODX Revolution before 2.5.7, a user with resource edit permissions can inject an XSS payload into the title of any post via the pagetitle parameter to connectors/index.php...

CVE-2017-9070: Improper Neutralization of Input During Web Page Generation

In MODX Revolution before 2.5.7, a user with resource edit permissions can inject an XSS payload into the title of any post via the pagetitle parameter to connectors/index.php...

PT-2017-18686

Name of the Vulnerable Software and Affected Versions MODX Revolution versions prior to 2.5.7 Description The issue allows a user with resource edit permissions to inject an XSS payload into the title of any post via the "connectors/index.php" endpoint, specifically through the pagetitle paramete...

PT-2013-4901

Name of the Vulnerable Software and Affected Versions Apache Roller versions prior to 5.0.2 Description The issue allows remote attackers to execute arbitrary OGNL expressions via certain parameters, such as the pageTitle parameter in the !getPageTitle sub-URL to roller-ui/login.rol. This is...

PT-2013-1476

Name of the Vulnerable Software and Affected Versions Axis M10 Series Network Cameras M1054 firmware versions prior to 5.21 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the pageTitle parameter to "admin/showReport.shtml"...

CVE-2011-5261: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in serverreport.cgi in Axis M10 Series Network Cameras M1054 firmware 5.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the pageTitle parameter to admin/showReport.shtml...

Cross site scripting

Cross-site scripting XSS vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to inject arbitrary web script or HTML via the pagetitle parameter...

CVE-2006-0676

Cross-site scripting XSS vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to inject arbitrary web script or HTML via the pagetitle parameter...

CVE-2006-0676: Undefined Security Weakness

Cross-site scripting XSS vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to inject arbitrary web script or HTML via the pagetitle parameter...