CVE-2025-8124

A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /system/role/authUser/unallocatedList. The manipulation of the argument paramsdataScope leads to sql injection. The attack can be...

foreman: Stored XSS vulnerability in smart class parameters/variables

A stored cross-site scripting XSS flaw was found in the smart class parameters/variables field. By sending a specially crafted request to Satellite, a remote, authenticated attacker could embed HTML content into the stored data, allowing them to inject malicious content into the web page that is...

PT-2015-5692

Name of the Vulnerable Software and Affected Versions WoltLab Community Gallery version 2.0 before 2014-12-26 Description The issue allows remote attackers to inject arbitrary web script or HTML via the parametersdata7title parameter in a "saveImageData" action to "index.php/AJAXProxy". This is a...