7 matches found
PT-2026-95025
Name of the Vulnerable Software and Affected Versions code-projects Matrimonial System version 1.0 Description A remote SQL injection exists in the /partner preference.php file. The issue occurs within the writepartnerprefs function when the education variable is manipulated, allowing an attacker...
CVE-2018-7563
An issue was discovered in GLPI through 9.2.1. The application is affected by XSS in the query string to front/preference.php. An attacker is able to create a malicious URL that, if opened by an authenticated user with debug privilege, will execute JavaScript code supplied by the attacker. The...
CVE-2018-7563
An issue was discovered in GLPI through 9.2.1. The application is affected by XSS in the query string to front/preference.php. An attacker is able to create a malicious URL that, if opened by an authenticated user with debug privilege, will execute JavaScript code supplied by the attacker. The...
CVE-2018-7563
CVE-2018-7563 affects GLPI up to version 9.2.1, with an XSS vulnerability in the query string of front/preference.php. An attacker can craft a malicious URL that, when opened by an authenticated user with debug privilege , executes attacker-supplied JavaScript. Impact described includes potential...
CVE-2018-7563
An issue was discovered in GLPI through 9.2.1. The application is affected by XSS in the query string to front/preference.php. An attacker is able to create a malicious URL that, if opened by an authenticated user with debug privilege, will execute JavaScript code supplied by the attacker. The...
PT-2018-18158
Name of the Vulnerable Software and Affected Versions GLPI versions prior to 9.2.2 Description The issue affects the application, allowing for XSS in the query string to "front/preference.php". An attacker can create a malicious URL that, if opened by an authenticated user with debug privilege,...
CVE-2018-7563: Improper Neutralization of Input During Web Page Generation
An issue was discovered in GLPI through 9.2.1. The application is affected by XSS in the query string to front/preference.php. An attacker is able to create a malicious URL that, if opened by an authenticated user with debug privilege, will execute JavaScript code supplied by the attacker. The...