784 matches found
CVE-2020-11944
Abe aka bitcoin-abe through 0.7.2, and 0.8pre, allows XSS in call in abe.py because the PATHINFO environment variable is mishandled during a PageNotFound exception...
Cross site scripting
Abe aka bitcoin-abe through 0.7.2, and 0.8pre, allows XSS in call in abe.py because the PATHINFO environment variable is mishandled during a PageNotFound exception...
CVE-2019-20514
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the address/ URI...
CVE-2019-20519
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the user/ URI, as demonstrated by a crafted e-mail address...
CVE-2019-20520
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the api/method/ URI...
CVE-2019-20514
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the address/ URI...
CVE-2019-20519
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the user/ URI, as demonstrated by a crafted e-mail address...
CVE-2019-20517
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the contact/ URI...
CVE-2019-20516
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the blog/ URI...
CVE-2019-20517
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the contact/ URI...
CVE-2019-20515
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the addresses/ URI...
CVE-2019-20518
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the project/ URI...
CVE-2019-20516
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the blog/ URI...
Cross site scripting
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the blog/ URI...
Cross site scripting
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the address/ URI...
Design/Logic Flaw
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the user/ URI, as demonstrated by a crafted e-mail address...
Cross site scripting
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the api/method/ URI...
Cross site scripting
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the api/ URI...
CVE-2019-20521
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the api/ URI...
CVE-2019-20521
CVE-2019-20521 affects ERPNext 11.1.47, where a reflected XSS vulnerability can be triggered via PATH_INFO to the api/ URI. The connected documents confirm the existence of this reflected XSS issue and its target product/version, but do not provide concrete exploitation details, specific vulnerab...