132 matches found
CVE-2023-5582 ZZZCMS Personal Profile Page cross site scripting
A vulnerability, which was classified as problematic, has been found in ZZZCMS 2.2.0. This issue affects some unknown processing of the component Personal Profile Page. The manipulation leads to basic cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to th...
CVE-2023-5582 ZZZCMS Personal Profile Page cross site scripting
A vulnerability, which was classified as problematic, has been found in ZZZCMS 2.2.0. This issue affects some unknown processing of the component Personal Profile Page. The manipulation leads to basic cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to th...
PT-2023-32194 · Zzcms · Zzcms
Name of the Vulnerable Software and Affected Versions: ZZZCMS version 2.2.0 Description: A vulnerability has been found in the Personal Profile Page component of ZZZCMS, which affects some unknown processing and leads to basic cross-site scripting. The attack may be initiated remotely. The exploi...
ZZZCMS Security Breach
ZZZCMS is a content management system CMS. A security vulnerability exists in ZZZCMS version 2.2.0, which originates from a cross-site scripting XSS vulnerability in the Personal Profile page...
Malicious code in personal-profile-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5dfd44b67730d9649f2fa1cdf8999719e5f34e7e9a6b918daf0de76f176a73e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-1523 Malicious code in personal-profile-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5dfd44b67730d9649f2fa1cdf8999719e5f34e7e9a6b918daf0de76f176a73e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2020-23126
Chamilo LMS version 1.11.10 contains an XSS vulnerability in the personal profile edition form, affecting the user him/herself and social network friends...
Cross site scripting
Chamilo LMS version 1.11.10 contains an XSS vulnerability in the personal profile edition form, affecting the user him/herself and social network friends...
CVE-2020-23126
Chamilo LMS 1.11.10 is affected by an XSS vulnerability in the personal profile edition form. The root cause is insufficient input validation/escaping in profile edit fields, allowing arbitrary script execution in the user's context (including social network friends). Impact is described as XSS; ...
CVE-2020-23126
Chamilo LMS version 1.11.10 contains an XSS vulnerability in the personal profile edition form, affecting the user him/herself and social network friends...
Synology Application Service Information Disclosure Vulnerability (CNVD-2019-08965)
Synology Application Service is a Synology NAS Network Storage Server feature extension framework from Synology, Inc. An information disclosure vulnerability exists in SYNO.Personal.Profile in Synology Application Service versions prior to 1.5.4-0320. The vulnerability, which originates from a...
CVE-2018-13294
Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the uid parameter...