PT-2023-10201 · Unknown · Iish Nlgis2

Name of the Vulnerable Software and Affected Versions: IISH nlgis2 affected versions not specified Description: A critical issue was found in IISH nlgis2, affecting an unknown functionality of the file scripts/etl/custom import.pl. This issue leads to sql injection. Recommendations: To fix this...

CVE-2021-4304 eprintsug ulcc-core toolbox command injection

A vulnerability was found in eprintsug ulcc-core. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file cgi/toolbox/toolbox. The manipulation of the argument password leads to command injection. The attack can be launched remotely. The patch is...

PT-2023-10806 · Mediawiki · Mediawiki-Extensions-I18Ntags

Name of the Vulnerable Software and Affected Versions: mediawiki-extensions-I18nTags affected versions not specified Description: A issue was found in the processing of the file I18nTags body.php of the component Unlike Parser, which leads to cross site scripting. The attack may be initiated...

CVE-2022-4875 fossology cross site scripting

A vulnerability has been found in fossology and classified as problematic. This vulnerability affects unknown code. The manipulation of the argument sql/VarValue leads to cross site scripting. The attack can be initiated remotely. The patch is identified as 8e0eba001662c7eb35f045b70dd458a4643b455...

CVE-2012-10002 ahmyi RivetTracker css.php changeColor cross site scripting

A vulnerability was found in ahmyi RivetTracker. It has been declared as problematic. Affected by this vulnerability is the function changeColor of the file css.php. The manipulation of the argument setcss leads to cross site scripting. The attack can be launched remotely. The patch is named...

PT-2023-15887 · Unknown · Nflpick-Em.Com

Name of the Vulnerable Software and Affected Versions: nflpick-em.com versions up to 2.2.x Description: A problematic vulnerability was found in nflpick-em.com, affecting the Load Users function of the file html/includes/runtime/admin/JSON/LoadUsers.php. The manipulation of the sort argument lead...

CVE-2015-10011 OpenDNS OpenResolve endpoints.py neutralization for logs

A vulnerability classified as problematic has been found in OpenDNS OpenResolve. This affects an unknown part of the file resolverapi/endpoints.py. The manipulation leads to improper output neutralization for logs. The identifier of the patch is 9eba6ba5abd89d0e36a008921eb307fcef8c5311. It is...

CVE-2015-10010 OpenDNS OpenResolve API endpoints.py get cross site scripting

A vulnerability was found in OpenDNS OpenResolve. It has been rated as problematic. Affected by this issue is the function get of the file resolverapi/endpoints.py of the component API. The manipulation leads to cross site scripting. The attack may be launched remotely. The complexity of an attac...

CVE-2019-25093 dragonexpert Recent Threads on Index Setting hooks.php recentthread_list_threads cross site scripting

A vulnerability, which was classified as problematic, was found in dragonexpert Recent Threads on Index. Affected is the function recentthreadlistthreads of the file inc/plugins/recentthreads/hooks.php of the component Setting Handler. The manipulation of the argument recentthreadforumskip leads ...

PT-2023-10107 · Unknown · License To Kill

Name of the Vulnerable Software and Affected Versions: License to Kill affected versions not specified Description: A critical issue was found in License to Kill, affecting an unknown part of the file models/injury.rb. The manipulation of the name argument leads to sql injection. Recommendations:...

PT-2023-10190 · Cisco · Opendns Openresolve

Name of the Vulnerable Software and Affected Versions: OpenDNS OpenResolve affected versions not specified Description: A problematic vulnerability has been found in OpenDNS OpenResolve, affecting an unknown part of the file resolverapi/endpoints.py. The manipulation leads to improper output...

PT-2023-10102 · Unknown · Porpeeranut Go-With-Me

Name of the Vulnerable Software and Affected Versions: porpeeranut go-with-me affected versions not specified Description: A critical issue has been identified, affecting an unknown functionality of the file module/frontend/add.php, which leads to sql injection. Recommendations: To resolve this...

PT-2023-11351 · Unknown · Dragonexpert

Name of the Vulnerable Software and Affected Versions: dragonexpert Recent Threads on Index affected versions not specified Description: A problematic vulnerability was found in the function recentthread list threads of the file inc/plugins/recentthreads/hooks.php of the component Setting Handler...

PT-2023-10105 · Unknown · Jobs-Plugin

Name of the Vulnerable Software and Affected Versions: Jobs-Plugin affected versions not specified Description: A problematic vulnerability was found in the Jobs-Plugin, affecting an unknown functionality, which leads to cross-site scripting. The attack can be launched remotely. Recommendations: ...

CVE-2015-10006 admont28 Ingnovarq insertarSliderAjax.php cross site scripting

A vulnerability, which was classified as problematic, has been found in admont28 Ingnovarq. Affected by this issue is some unknown functionality of the file app/controller/insertarSliderAjax.php. The manipulation of the argument imagetitle leads to cross site scripting. The attack may be launched...

PT-2023-10100 · Unknown · Taoeffect Empress

Name of the Vulnerable Software and Affected Versions: taoeffect Empress affected versions not specified Description: A critical issue has been found in taoeffect Empress, affecting some unknown functionality. The manipulation leads to the use of a hard-coded password. Recommendations: To fix thi...

CVE-2021-4296

A vulnerability, which was classified as problematic, has been found in w3c Unicorn. This issue affects the function ValidatorNuMessage of the file src/org/w3c/unicorn/response/impl/ValidatorNuMessage.java. The manipulation of the argument message leads to cross site scripting. The attack may be...

PT-2022-11745 · Red Hat · Openshift Osin

Name of the Vulnerable Software and Affected Versions: OpenShift OSIN affected versions not specified Description: A vulnerability was found in OpenShift OSIN, classified as problematic. It affects the function ClientSecretMatches/CheckClientSecret. The manipulation of the argument secret leads t...

PT-2022-28124 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: FlatPress affected versions not specified Description: A problematic issue has been found in FlatPress, affecting some unknown processing of the file setup/lib/main.lib.php of the component Setup. The manipulation leads to cross site scriptin...

PT-2022-8015 · Challenge Website +2 · Challenge Website +1

Name of the Vulnerable Software and Affected Versions: challenge website affected versions not specified Description: A critical issue affects some unknown processing, leading to sql injection. The estimated number of potentially affected devices worldwide is not available. There is no informatio...