CVE-2024-36697

A cross-site scripting (XSS) vulnerability exists in the Admin Login page of Allworx System Software v9.1.9.12 . The flaw is caused by the improper handling of the SessionID parameter at the query.asp API endpoint, which allows an attacker to inject a crafted payload to execute arbitrary web scri...

CVE-2024-36697: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the Admin Login page of Allworx System Software v9.1.9.12 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the SessionID parameter at query.asp...

iranmedex.ir XSS vulnerability

Vulnerable URL: http://www.iranmedex.ir/query.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9060311 VIP website status:| No Check iranmedex.ir SSL connection:| Grade: F...

CVE-1999-0449: Undefined Security Weakness

The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service CPU consumption via a direct request to the 1 advsearch.asp, 2 query.asp, or 3 search.asp scripts...