CVE-2020-5748

Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks via the self-registration feature...

CVE-2020-5748

Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks via the self-registration feature...

CVE-2020-5746

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted test...

CVE-2020-5747

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted test...

CVE-2020-5747

TCExam 14.2.2 contains a cross-site scripting (XSS) vulnerability due to insufficient output sanitization. A remote, authenticated attacker can create a crafted test to persist XSS. No patch/firmware version or remediation is detailed in the provided documents.

PT-2020-18669

Name of the Vulnerable Software and Affected Versions TCExam version 14.2.2 Description The issue is related to insufficient output sanitization, allowing a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks. This can be achieved via the self-registration...

PT-2020-18670

Name of the Vulnerable Software and Affected Versions TCExam version 14.2.2 Description The issue is related to insufficient output sanitization, allowing a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks. This can be achieved by creating a crafted group...

PT-2020-18668

Name of the Vulnerable Software and Affected Versions TCExam version 14.2.2 Description The issue is related to insufficient output sanitization, allowing a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks. This can be achieved by creating a crafted test...

PT-2020-18667

Name of the Vulnerable Software and Affected Versions TCExam version 14.2.2 Description The issue is related to insufficient output sanitization, allowing a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks. This can be achieved by creating a crafted test...

PT-2020-18671

Name of the Vulnerable Software and Affected Versions TCExam version 14.2.2 Description The issue is related to insufficient output sanitization, which allows a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks. This can be achieved via the self-registration...

CVE-2020-5750: Improper Neutralization of Input During Web Page Generation

Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks via the self-registration feature...

CVE-2020-5748: Improper Neutralization of Input During Web Page Generation

Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks via the self-registration feature...

CVE-2020-5746: Improper Neutralization of Input During Web Page Generation

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted test...

CVE-2020-5747: Improper Neutralization of Input During Web Page Generation

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted test...

PT-2020-18672

Name of the Vulnerable Software and Affected Versions TCExam version 14.2.2 Description The issue is related to insufficient output sanitization, allowing a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks. This can be achieved by creating a crafted operator...

Draytek VigorAP 1000C - Persistent Cross-Site Scripting

Title: Draytek VigorAP 1000C - Persistent Cross-Site Scripting Author: Vulnerability Laboratory Date: 2020-05-07 Vendor: https://www.draytek.com/ Software: https://www.draytek.com/products/vigorap-903/ CVE: N/A Document Title: =============== Draytek VigorAP - RADIUS Persistent XSS Vulnerability...

CVE-2020-5751: Improper Neutralization of Input During Web Page Generation

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted operator...

CVE-2020-5749: Improper Neutralization of Input During Web Page Generation

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted group...

Draytek VigorAP - (RADIUS) Persistent XSS Vulnerability

Document Title: =============== Draytek VigorAP - RADIUS Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2244 Release Date: ============= 2020-05-06 Vulnerability Laboratory ID VL-ID: ==================================== 224...

CSZ CMS 1.2.7 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: CSZ CMS 1.2.7 - Persistent Cross-Site Scripting Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.cszcms.com/ Software Link: https://sourceforge.net/projects/cszcms/ Version: v1.2.7 Description: Unauthorized user...