CVE-2023-38066

In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads...

Cross site scripting

In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads...

CVE-2023-38066

Summary (CVE-2023-38066) : JetBrains TeamCity versions prior to 2023.05.1 are affected by a reflected XSS vulnerability that can be triggered via the Referer header during artifact downloads. The issue is triggered in the web UI when user-supplied Referer data is reflected back, potentially enabl...

CVE-2023-38066

In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads...

CVE-2023-38066

In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads...

JetBrains TeamCity 跨站脚本漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A cross-site scripting vulnerability exists in...

CVE-2023-38066: Improper Neutralization of Input During Web Page Generation

In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads...

PT-2023-11374

Name of the Vulnerable Software and Affected Versions Pretty Links plugin for WordPress versions up to, and including, 2.1.9 Description The issue arises from insufficient input sanitization and output escaping in the track link function, allowing unauthenticated attackers to inject arbitrary web...

CVE-2019-25147: Improper Neutralization of Input During Web Page Generation

The Pretty Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via various IP headers as well as the referer header in versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping in the tracklink function. This makes it possible for...

Textpattern 4.8.8 Session Token Disclosure Vulnerability

Textpattern version 4.8.8 logs the session token in a GET request where it may end up getting disclosed in logs or via a referer. Title: textpattern-4.8.8 Session token in URL Vulnerability Author: nu11secur1ty Vendor: https://textpattern.com/ Software:...

WordPress Block Referer Spam Plugin <= 1.1.9.4 is vulnerable to Cross Site Scripting (XSS)

Software Block Referer Spam Type Plugin Vulnerable versions = 1.1.9.4 Fixed in 1.1.9.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32497 Patch priority Low CVSS severity Low 5.1 Developer Claim ownership PSID 9bfabf6d69ec Credits Taihei Shimamine...

CVE-2020-21038

Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php...

CVE-2020-21038

Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php...

CVE-2020-21038

Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php...

PT-2023-11571 · Typecho · Typecho

Name of the Vulnerable Software and Affected Versions: Typecho versions 1.1 through 17.10.30-release Description: The issue is related to an open redirect vulnerability. It can be exploited via the referer parameter to the "Login.php" endpoint. Recommendations: For Typecho versions 1.1 through...

CVE-2020-21038: URL Redirection to Untrusted Site

Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php...

typecho 输入验证错误漏洞

typecho is a PHP blogging platform for typecho individual developers. It is simple and powerful. A security vulnerability exists in typecho version 1.1-17.10.30-release, which stems from a redirection vulnerability via the referer parameter of Login.php...

CVE-2023-27569

The eotags package before 1.3.0 for PrestaShop allows SQL injection via an HTTP User-Agent or Referer header...

Sql injection

The eotags package before 1.3.0 for PrestaShop allows SQL injection via an HTTP User-Agent or Referer header...

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop eotags versions prior to 1.3.0, which stems from a vulnerabili...