178 matches found
CVE-2024-10479
A vulnerability, which was classified as problematic, was found in LinZhaoguan pb-cms up to 2.0.1. Affected is an unknown function of the file /adminthemes of the component Theme Management Module. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The...
CVE-2024-10478
A vulnerability, which was classified as problematic, has been found in LinZhaoguan pb-cms up to 2.0.1. This issue affects some unknown processing of the file /adminarticle/edit?id=2 of the component Edit Article Handler. The manipulation leads to cross site scripting. The attack may be initiated...
CVE-2024-10478
A vulnerability, which was classified as problematic, has been found in LinZhaoguan pb-cms up to 2.0.1. This issue affects some unknown processing of the file /adminarticle/edit?id=2 of the component Edit Article Handler. The manipulation leads to cross site scripting. The attack may be initiated...
CVE-2024-10477
A vulnerability classified as problematic was found in LinZhaoguan pb-cms up to 2.0.1. This vulnerability affects unknown code of the file /adminpermissions of the component Permission Management Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The explo...
CVE-2024-10477
A vulnerability classified as problematic was found in LinZhaoguan pb-cms up to 2.0.1. This vulnerability affects unknown code of the file /adminpermissions of the component Permission Management Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The explo...
CVE-2024-10478
CVE-2024-10478 affects LinZhaoguan pb-cms up to version 2.0.1. The issue resides in the Edit Article Handler, specifically in processing the file path /admin#article/edit?id=2, enabling cross-site scripting. Exploitation is possible remotely and has been publicly disclosed. Connected sources prov...
CVE-2024-10478 LinZhaoguan pb-cms Edit Article edit cross site scripting
A vulnerability, which was classified as problematic, has been found in LinZhaoguan pb-cms up to 2.0.1. This issue affects some unknown processing of the file /adminarticle/edit?id=2 of the component Edit Article Handler. The manipulation leads to cross site scripting. The attack may be initiated...
CVE-2024-10477 LinZhaoguan pb-cms Permission Management Page admin#permissions cross site scripting
A vulnerability classified as problematic was found in LinZhaoguan pb-cms up to 2.0.1. This vulnerability affects unknown code of the file /adminpermissions of the component Permission Management Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The explo...
CVE-2024-10477
CVE-2024-10477 affects LinZhaoguan pb-cms up to version 2.0.1. The vulnerability resides in the Permission Management Page component, specifically the file referenced as /admin#permissions, and leads to cross-site scripting. The issue can be triggered remotely and, according to multiple sources, ...
PT-2024-16307 · Linzhaoguan · Linzhaoguan Pb-Cms
Name of the Vulnerable Software and Affected Versions: LinZhaoguan pb-cms versions up to 2.0.1 Description: A problematic issue was found in the Theme Management Module of the affected software, specifically in an unknown function of the file /adminthemes. This issue leads to cross-site scripting...
pb-cms 跨站脚本漏洞
pb-cms waterfall content management system is a content management system by LinZhaoguan personal developer. A cross-site scripting vulnerability exists in pb-cms versions prior to 2.0.1, which stems from the component Permission Management Page's file /adminpermissions that can lead to cross-sit...
PT-2024-16305 · Unknown · Linzhaoguan Pb-Cms
Name of the Vulnerable Software and Affected Versions: LinZhaoguan pb-cms versions up to 2.0.1 Description: A problematic issue was found in the Permission Management Page component, affecting the /adminpermissions file. This leads to cross-site scripting, which can be initiated remotely. The iss...
CVE-2024-46555
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pb parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
DrayTek Vigor 3910 安全漏洞
DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the pb parameter of the v2x00.cgi page. An attacker can cause a denial o...
PT-2024-28923 · Unknown · Btstack Mesh
Name of the Vulnerable Software and Affected Versions: btstack mesh versions before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 Description: The issue allows a remote attacker to execute arbitrary code via the pb adv handle tranaction cont function in the src/mesh/pb adv.c component. This is a...
PT-2024-32037 · Draytek · Draytek Vigor 3910
Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow was discovered in the pb parameter at the "v2x00.cgi" endpoint, allowing attackers to cause a Denial of Service DoS via a crafted input. Recommendations: For Draytek Vigor 3910...
Malicious code in pb-styles-v1 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2852 Malicious code in pb-styles-v1 (npm)
--- -= Per source details. Do not edit below this line.=-...
pb-scalemodels.com Cross Site Scripting vulnerability OBB-3928957
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-33935
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pascal Bajorat PB MailCrypt allows Stored XSS.This issue affects PB MailCrypt: from n/a through 3.1.0...