CVE-2019-17427

CVE-2019-17427 CVE-2019-17427 持続型XSS POC Redmine 3.4.11未満および4.0.x系の4.0.4未満では、textileフォーマットのエラーにより持続型XSSが存在します。 脆弱性は基本的に、デフォルトでtextileフォーマットを使用するすべてのwikiページに存在します。preパラメータを使用することで悪用可能です。 pre onfocusin=alert"pwnd" tabindex=1 style="height:500px;width:500px;" class=...

itsourcecode Student Transcript Processing System 代码注入漏洞

itsourcecode Student Transcript Processing System is itsourcecode open source a student transcript processing system . A code injection vulnerability exists in itsourcecode Student Transcript Processing System version 1.0, which originates from improper manipulation of the parameter pre in the fi...

CVE-2018-6006

SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter...

Sql injection

SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter...

PT-2006-5395 · Phprojekt · Phprojekt

Name of the Vulnerable Software and Affected Versions: PHProjekt version 0.6.1 Description: The issue allows remote attackers to execute arbitrary PHP code via the path pre parameter in several PHP files, including cm lib.inc.php, doc/br.edithelp.php, doc/de.edithelp.php, doc/ct.edithelp.php,...