CVE-2021-26084_Confluence

CVE-2021-26084 - Confluence Server Webwork OGNL injection Existe una vulnerabilidad de inyección OGNL que permitiría a un usuario autenticado y, en algunos casos, a un usuario no autenticado, ejecutar código arbitrario en una instancia de Confluence Server o Data Center. IMPORTANTE Este exploit...

CVE-2021-26084

CVE-2021-26084 CVE-2021-26084, vulnerabilidad de inyección OGNL en Atlassian Confluence Atlassian Confluence es un sistema wiki ampliamente utilizado en empresas. En algunas de sus versiones existe una vulnerabilidad de inyección de expresiones OGNL. Un atacante puede explotar esta vulnerabilidad...

TWiki 6.0.1 Cross Site Scripting

A cross site scripting vulnerability exists in TWiki version 6.0.1 via the QUERYSTRING parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML. This issue is older research added to the archive...

EUVD-2008-6693

Malware in sbrugna...

CVE-2025-32371

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. A url could be crafted to the DNN ImageHandler to render text from a querystring parameter. This text would display in the resulting image and a user that trusts the domain might think that t...

CVE-2020-13127

A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote authenticated attackers to execute arbitrary SQL commands via the TASKSLISTpt.querystring parameter...

CVE-2018-18761

SaltOS 3.1 r8126 allows action=login&querystring=&user=SQL SQL Injection...

Cross site scripting

Cross-site scripting XSS vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8.3 allows remote attackers to inject arbitrary web script or HTML via the querystring parameter...

CVE-2008-6733

Cross-site scripting XSS vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8.3 allows remote attackers to inject arbitrary web script or HTML via the querystring parameter...

CVE-2008-6733

Cross-site scripting XSS vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8.3 allows remote attackers to inject arbitrary web script or HTML via the querystring parameter...