1142 matches found
CVE-2022-26980
CVE-2022-26980 affects Teampass 2.1.26 and is described as a reflected XSS vulnerability via the index.php PATH_INFO. The linked sources corroborate a reflected XSS issue but do not provide an official patch version or remediation in the supplied documents. Documented CVSS scores from NVD (2.0/3....
CVE-2022-26980
Teampass 2.1.26 allows reflected XSS via the index.php PATHINFO...
CVE-2022-26980: Improper Neutralization of Input During Web Page Generation
Teampass 2.1.26 allows reflected XSS via the index.php PATHINFO...
Mitsubishi Electric SmartRTU Cross-site Scripting (CVE-2018-16061)
Mitsubishi Electric SmartRTU devices allow XSS via the username parameter or PATHINFO to login.php. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2018-16061
Mitsubishi Electric Europe B.V. SmartRTU devices allow XSS via the username parameter or PATHINFO to login.php...
CVE-2018-16061
Mitsubishi Electric Europe B.V. SmartRTU devices allow XSS via the username parameter or PATHINFO to login.php...
CVE-2018-16061
Summary: CVE-2018-16061 affects Mitsubishi Electric SmartRTU devices, enabling cross‑site scripting via the username parameter or PATH_INFO to login.php. Root cause: likely lack of proper validation/escaping on login.php inputs (insufficient input sanitization). Impact: XSS in the SmartRTU web in...
CVE-2018-16061: Improper Neutralization of Input During Web Page Generation
Mitsubishi Electric Europe B.V. SmartRTU devices allow XSS via the username parameter or PATHINFO to login.php...
CVE-2020-24701: Improper Neutralization of Input During Web Page Generation
OX App Suite through 7.10.4 allows XSS via the app loading mechanism the PATHINFO to the /appsuite URI...
CVE-2020-28351
The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack via the PATHINFO to index.php due to insufficient validation for the timezone object in the HOMEMEETING& page...
CVE-2020-28351: Improper Neutralization of Input During Web Page Generation
The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack via the PATHINFO to index.php due to insufficient validation for the timezone object in the HOMEMEETING& page...
Exploit for Cross-site Scripting in Mitel Shoretel_Firmware
ShoreTel 19.46.1802.0 Reflected Cross Site Scripting Attack T...
CVE-2020-26135
Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATHINFO...
Cross site scripting
Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATHINFO...
CVE-2020-26135
CVE-2020-26135 affects Live Helper Chat prior to version 3.44 and allows a reflected XSS via the setsettingajax PATH_INFO. The available connected docs confirm the vulnerability description but do not provide details on affected exact versions beyond “before 3.44v,” nor do they specify concrete e...
CVE-2020-26135
Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATHINFO...
CVE-2020-26135
Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATHINFO...
CVE-2020-26135: Improper Neutralization of Input During Web Page Generation
Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATHINFO...
Cross-Site Scripting (XSS)
kumbia/framework is vulnerable to cross-site scripting XSS. A remote attacker is able to inject and execute arbitrary Javascript in a user's browser via the PATHINFO in the public/pages/kumbia module...