21 matches found
CVE-2022-43117
建议描述 发现 Sourcecodester Password Storage Application in PHP/OOP and MySQL 1.0 存在多个跨站脚本(XSS)漏洞, 涉及 Name、Username、Description 和 Site Feature 参数。 附加信息 概念验证:https://drive.google.com/file/d/1ZmAuKMVzUpL8pt5KXQJk8IyPECoVP9xw/view?usp=sharing...
CVE-2022-42993
Password Storage Application v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Setup page...
EUVD-2022-46188
Malicious code in bioql PyPI...
EUVD-2022-46042
Malicious code in bioql PyPI...
EUVD-2022-46166
Malicious code in bioql PyPI...
CVE-2022-43117
Sourcecodester Password Storage Application in PHP/OOP and MySQL 1.0 was discovered to contain multiple cross-site scripting XSS vulnerabilities via the Name, Username, Description and Site Feature parameters...
CVE-2022-43142
A cross-site scripting XSS vulnerability in the add-fee.php component of Password Storage Application v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter...
CVE-2022-43117
Sourcecodester Password Storage Application in PHP/OOP and MySQL 1.0 was discovered to contain multiple cross-site scripting XSS vulnerabilities via the Name, Username, Description and Site Feature parameters...
Password Storage Application 跨站脚本漏洞
Password Storage Application is a password storage application by the individual developer Carlo Montero. A security vulnerability exists in version 1.0 of Password Storage Application that allows an attacker to implement multiple cross-site scripts via the Name, Username, Description, and Site...
CVE-2022-43142
A cross-site scripting XSS vulnerability in the add-fee.php component of Password Storage Application v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter...
CVE-2022-43142
A cross-site scripting XSS vulnerability in the add-fee.php component of Password Storage Application v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter...
CVE-2022-43142
A cross-site scripting XSS vulnerability in the add-fee.php component of Password Storage Application v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter...
CVE-2022-43142
A cross-site scripting XSS vulnerability in the add-fee.php component of Password Storage Application v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter...
CVE-2022-43142
The CVE-2022-43142 issue affects Password Storage Application v1.0, specifically the add-fee.php component. A cross-site scripting (XSS) vulnerability allows an attacker to inject a crafted payload via the cmddept parameter, causing execution of arbitrary web scripts or HTML. CVSS/metrics in the ...
Password Storage Application 跨站脚本漏洞
Password Storage Application is a password storage application by Carlo Montero Personal Developer. A security vulnerability exists in Password Storage Application v1.0, which originates from a cross-site scripting XSS vulnerability in the component add-fee.php, which allows attackers to execute...
CVE-2022-42993
Password Storage Application v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Setup page...
CVE-2022-42993
Password Storage Application v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Setup page...
PT-2022-26700 · Unknown · Password Storage Application
Name of the Vulnerable Software and Affected Versions: Password Storage Application version 1.0 Description: The Password Storage Application contains a cross-site scripting XSS issue via the Setup page. This allows for potential malicious script injection and execution. Recommendations: For...
CVE-2022-42993
Password Storage Application v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Setup page...
Password Storage Application 跨站脚本漏洞
Password Storage Application is a password storage application. A cross-site scripting vulnerability exists in the Carlo Montero Password Storage Application, which stems from a lack of effective filtering and escaping of user-supplied data on the settings page, and can be exploited by an attacke...