PT-2020-18669

Name of the Vulnerable Software and Affected Versions TCExam version 14.2.2 Description The issue is related to insufficient output sanitization, allowing a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks. This can be achieved via the self-registration...

Sentrifugo CMS 3.2 Cross Site Scripting

Document Title: =============== Sentrifugo v3.2 CMS - Persistent XSS Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2229 Release Date: ============= 2020-05-05 Vulnerability Laboratory ID VL-ID: ==================================== 22...

PT-2020-18670

Name of the Vulnerable Software and Affected Versions TCExam version 14.2.2 Description The issue is related to insufficient output sanitization, allowing a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks. This can be achieved by creating a crafted group...

OpenZ ERP 3.6.60 Cross Site Scripting

Document Title: =============== OpenZ v3.6.60 ERP - Employee Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2234 Release Date: ============= 2020-05-06 Vulnerability Laboratory ID VL-ID: ====================================...

Draytek VigorAP 1000C - Persistent Cross-Site Scripting

Title: Draytek VigorAP 1000C - Persistent Cross-Site Scripting Author: Vulnerability Laboratory Date: 2020-05-07 Vendor: https://www.draytek.com/ Software: https://www.draytek.com/products/vigorap-903/ CVE: N/A Document Title: =============== Draytek VigorAP - RADIUS Persistent XSS Vulnerability...

Online Clothing Store 1.0 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Online Clothing Store 1.0 - Persistent Cross-Site Scripting Exploit Author: Sushant Kamble Vendor Homepage: https://www.sourcecodester.com/php/14185/online-clothing-store.html Software Link:...

KeeWeb 1.14.0 HTML Injection

Document Title: =============== KeeWeb v1.14.0 - Notes Html Inject Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2237 Release Date: ============= 2020-05-06 Vulnerability Laboratory ID VL-ID: ==================================== 2237...

CVE-2020-5749: Improper Neutralization of Input During Web Page Generation

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted group...

PT-2020-18672

Name of the Vulnerable Software and Affected Versions TCExam version 14.2.2 Description The issue is related to insufficient output sanitization, allowing a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks. This can be achieved by creating a crafted operator...

PT-2020-18668

Name of the Vulnerable Software and Affected Versions TCExam version 14.2.2 Description The issue is related to insufficient output sanitization, allowing a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks. This can be achieved by creating a crafted test...

Sellacious eCommerce - Multiple Persistent Vulnerabilities

Document Title: =============== Sellacious eCommerce - Multiple Persistent Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2226 Release Date: ============= 2020-05-07 Vulnerability Laboratory ID VL-ID: ===================================...

Online Clothing Store 1.0 Cross Site Scripting

Exploit Title: Online Clothing Store 1.0 - Persistent Cross-Site Scripting Date: 2020-05-05 Exploit Author: Sushant Kamble Vendor Homepage: https://www.sourcecodester.com/php/14185/online-clothing-store.html Software Link:...

Online Clothing Store 1.0 - Persistent Cross-Site Scripting

Exploit Title: Online Clothing Store 1.0 - Persistent Cross-Site Scripting Date: 2020-05-05 Exploit Author: Sushant Kamble Vendor Homepage: https://www.sourcecodester.com/php/14185/online-clothing-store.html Software Link:...

Draytek VigorAP - (RADIUS) Persistent XSS Vulnerability

Document Title: =============== Draytek VigorAP - RADIUS Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2244 Release Date: ============= 2020-05-06 Vulnerability Laboratory ID VL-ID: ==================================== 224...

Wordpress Theme Dosimple v2.0 - XSS Web Vulnerability

Document Title: =============== Wordpress Theme Dosimple v2.0 - XSS Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2251 Release Date: ============= 2020-05-06 Vulnerability Laboratory ID VL-ID: ==================================== 225...

KeeWeb v1.14.0 - (Notes) Html Inject Web Vulnerability

Document Title: =============== KeeWeb v1.14.0 - Notes Html Inject Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2237 Release Date: ============= 2020-05-05 Vulnerability Laboratory ID VL-ID: ==================================== 2237...

OpenZ v3.6.60 ERP - Employee Persistent XSS Vulnerability

Document Title: =============== OpenZ v3.6.60 ERP - Employee Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2234 Release Date: ============= 2020-05-05 Vulnerability Laboratory ID VL-ID: ====================================...

osTicket 1.14.1 - Persistent Authenticated Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Title: osTicket 1.14.1 - Persistent Authenticated Cross-Site Scripting Author: Mehmet Kelepce / Gais Cyber Security Source Link: https://github.com/osticket/osticket/commit/fc4c8608fa122f38673b9dddcb8fef4a15a9c884 Vendor: http://osticket.com...

Sentrifugo v3.2 CMS - Persistent XSS Web Vulnerability

Document Title: =============== Sentrifugo v3.2 CMS - Persistent XSS Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2229 Release Date: ============= 2020-05-04 Vulnerability Laboratory ID VL-ID: ==================================== 22...

File Explorer v1.4 iOS - Multiple Persistent Vulnerabilities

Document Title: =============== File Explorer v1.4 iOS - Multiple Persistent Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2219 Release Date: ============= 2020-05-03 Vulnerability Laboratory ID VL-ID:...