Lucene search
+L

132 matches found

Cvelist
Cvelist
added 2023/10/14 2:00 p.m.33 views

CVE-2023-5582 ZZZCMS Personal Profile Page cross site scripting

A vulnerability, which was classified as problematic, has been found in ZZZCMS 2.2.0. This issue affects some unknown processing of the component Personal Profile Page. The manipulation leads to basic cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to th...

4CVSS5.5AI score0.00502EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/10/14 2:00 p.m.18 views

CVE-2023-5582 ZZZCMS Personal Profile Page cross site scripting

A vulnerability, which was classified as problematic, has been found in ZZZCMS 2.2.0. This issue affects some unknown processing of the component Personal Profile Page. The manipulation leads to basic cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to th...

4CVSS6.2AI score0.00502EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/10/14 12:00 a.m.7 views

PT-2023-32194 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZZCMS version 2.2.0 Description: A vulnerability has been found in the Personal Profile Page component of ZZZCMS, which affects some unknown processing and leads to basic cross-site scripting. The attack may be initiated remotely. The exploi...

5.4CVSS6.1AI score0.00502EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2023/10/14 12:00 a.m.8 views

ZZZCMS Security Breach

ZZZCMS is a content management system CMS. A security vulnerability exists in ZZZCMS version 2.2.0, which originates from a cross-site scripting XSS vulnerability in the Personal Profile page...

5.4CVSS5.8AI score0.00502EPSS
SaveExploits1References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/08/21 2:25 a.m.6 views

Malicious code in personal-profile-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5dfd44b67730d9649f2fa1cdf8999719e5f34e7e9a6b918daf0de76f176a73e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2023/08/21 2:25 a.m.14 views

MAL-2023-1523 Malicious code in personal-profile-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5dfd44b67730d9649f2fa1cdf8999719e5f34e7e9a6b918daf0de76f176a73e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2021/11/03 5:15 p.m.25 views

CVE-2020-23126

Chamilo LMS version 1.11.10 contains an XSS vulnerability in the personal profile edition form, affecting the user him/herself and social network friends...

6.1CVSS6AI score
SaveExploits0References1
Prion
Prion
added 2021/11/03 5:15 p.m.30 views

Cross site scripting

Chamilo LMS version 1.11.10 contains an XSS vulnerability in the personal profile edition form, affecting the user him/herself and social network friends...

4.3CVSS6AI score0.00581EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/11/03 4:06 p.m.83 views

CVE-2020-23126

Chamilo LMS 1.11.10 is affected by an XSS vulnerability in the personal profile edition form. The root cause is insufficient input validation/escaping in profile edit fields, allowing arbitrary script execution in the user's context (including social network friends). Impact is described as XSS; ...

6.1CVSS6AI score0.00581EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/11/03 4:06 p.m.35 views

CVE-2020-23126

Chamilo LMS version 1.11.10 contains an XSS vulnerability in the personal profile edition form, affecting the user him/herself and social network friends...

6AI score0.00581EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/04/03 12:00 a.m.7 views

Synology Application Service Information Disclosure Vulnerability (CNVD-2019-08965)

Synology Application Service is a Synology NAS Network Storage Server feature extension framework from Synology, Inc. An information disclosure vulnerability exists in SYNO.Personal.Profile in Synology Application Service versions prior to 1.5.4-0320. The vulnerability, which originates from a...

6.5CVSS6.2AI score0.01287EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2019/04/01 3:29 p.m.3 views

CVE-2018-13294

Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the uid parameter...

6.5CVSS5.5AI score0.01287EPSS
SaveExploits0References2
Rows per page
Query Builder