639 matches found
CVE-2022-45892
In Planet eStream before 6.72.10.07, multiple Stored Cross-Site Scripting XSS vulnerabilities exist: Disclaimer, Search Function, Comments, Batch editing tool, Content Creation, Related Media, Create new user, and Change Username...
CVE-2021-4273
A vulnerability classified as problematic was found in studygolang. This vulnerability affects the function Search of the file http/controller/search.go. The manipulation of the argument q leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the...
Cross site scripting
A vulnerability classified as problematic was found in studygolang. This vulnerability affects the function Search of the file http/controller/search.go. The manipulation of the argument q leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the...
PT-2022-11671 · Unknown · Studygolang
Name of the Vulnerable Software and Affected Versions: studygolang affected versions not specified Description: A problematic vulnerability was found in studygolang, affecting the Search function of the file http/controller/search.go. The manipulation of the argument q leads to cross-site...
CVE-2021-4273
CVE-2021-4273 affects studygolang’s Search function (http/controller/search.go). Manipulating the q parameter triggers cross‑site scripting, with remote attack potential. A patch is available: 97ba556d42fa89dfaa7737e9cd3a8ddaf670bb23. References point to the GitHub commit/pull and VDB-216478. The...
CVE-2022-41413
perfSONAR v4.x = v4.4.5 was discovered to contain a Cross-Site Request Forgery CSRF which is triggered when an attacker injects crafted input into the Search function...
Cross site request forgery (csrf)
perfSONAR v4.x = v4.4.5 was discovered to contain a Cross-Site Request Forgery CSRF which is triggered when an attacker injects crafted input into the Search function...
PT-2022-25850 · Perfsonar · Perfsonar
Name of the Vulnerable Software and Affected Versions: perfSONAR versions 4.x through 4.4.5 Description: The issue is a Cross-Site Request Forgery CSRF that occurs when an attacker injects crafted input into the Search function. Recommendations: For versions 4.x through 4.4.5, consider disabling...
CVE-2022-41413
perfSONAR v4.x = v4.4.5 was discovered to contain a Cross-Site Request Forgery CSRF which is triggered when an attacker injects crafted input into the Search function...
perfSONAR 跨站请求伪造漏洞
perfSONAR is a widely deployed test and measurement infrastructure used by scientific networks and facilities around the world to monitor and ensure network performance. A security vulnerability exists in perfSONAR versions v4.x through v4.4.5 that stems from the inclusion of cross-site request...
CVE-2022-41413
perfSONAR v4.x = v4.4.5 was discovered to contain a Cross-Site Request Forgery CSRF which is triggered when an attacker injects crafted input into the Search function...
CVE-2022-40487
ProcessWire v3.0.200 was discovered to contain multiple cross-site scripting XSS vulnerabilities via the Search Users and Search Pages function. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML via injection of a crafted payload...
CVE-2022-41473
RPCMS v3.0.2 was discovered to contain a reflected cross-site scripting XSS vulnerability in the Search function...
Cross site scripting
RPCMS v3.0.2 was discovered to contain a reflected cross-site scripting XSS vulnerability in the Search function...
RPCMS 跨站脚本漏洞
RPCMS is a software application. A website CMS system. A security vulnerability exists in RPCMS version v3.0.2 that stems from the inclusion of reflected cross-site scripting XSS in the search function...
PT-2022-25880 · Rpcms · Rpcms
Name of the Vulnerable Software and Affected Versions: RPCMS version 3.0.2 Description: A reflected cross-site scripting XSS issue was found in the Search function. This could potentially allow an attacker to inject malicious scripts into the website. Recommendations: For RPCMS version 3.0.2,...
CVE-2022-41473
RPCMS v3.0.2 was discovered to contain a reflected cross-site scripting XSS vulnerability in the Search function...
CVE-2022-41473
RPCMS 3.0.2 contains a reflected Cross-Site Scripting (XSS) vulnerability in the Search function. An attacker can inject arbitrary script in the victim’s browser, potentially stealing cookie-based credentials and enabling additional browser-based attacks. Affected product: RPCMS 3.0.2; vulnerabil...
Cross site scripting
SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting XSS vulnerability via the Search function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search bar...