PT-2024-25461 · Unknown · Mvnrepository Ms Basic +1

Name of the Vulnerable Software and Affected Versions: MvnRepository MS Basic versions 2.1.18.3 and earlier Maven net.mingsoft MS Basic versions 2.1.13.4 and earlier Description: The issue is related to a cross-site scripting XSS vulnerability in the search function. This type of vulnerability...

CVE-2024-33748

The Maven net.mingsoft MS Basic library (versions 2.1.13.4 and earlier ) is vulnerable to a Cross-site Scripting (XSS) vulnerability within its search function . The root cause is insufficient input sanitization , which allows attackers to inject malicious scripts into the search input. This coul...

MvnRepository MS Basic 安全漏洞

MvnRepository MS Basic is an application from MvnRepository, Inc. A security vulnerability exists in MvnRepository MS Basic version 2.1.18.3 and prior versions, which stems from a cross-site scripting XSS vulnerability in the search function...

CVE-2024-33748

Cross-site scripting XSS vulnerability in the search function in Maven net.mingsoft MS Basic 2.1.13.4 and earlier...

CVE-2024-33121

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search function...

CVE-2024-33121

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search function...

CVE-2024-33121

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search function...

CVE-2024-33121

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search function...

CVE-2024-33121: Improper Neutralization of Special Elements used in an SQL Command

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search function...

CVE-2024-33121

Roothub version 2.6 , a forum system developed using SSM and MySQL, contains a SQL injection vulnerability. The flaw exists in the search() function via the 's' parameter, allowing for potential exploitation. To mitigate this risk, it is recommended to disable the search() function until a patch ...

Roothub 安全漏洞

Roothub is a forum system developed using SSM and MySQL. A security vulnerability exists in Roothub v2.6, which was discovered to contain an SQL injection vulnerability via the "s" parameter in the search function...

ROS-20240328-15

A vulnerability in the Web Browser UI of Google Chrome and Microsoft Edge browsers is related to incorrectly implemented security checks for standard elements. implemented security checks for standard elements. Exploitation of the vulnerability could allow an attacker acting remotely to conduct...

BaserCMS Command Injection Vulnerability (CNVD-2024-13537)

baserCMS is an enterprise-level content management system CMS from the baserCMS team. A command injection vulnerability exists in versions of baserCMS prior to 5.0.9, which stems from a failure to properly filter constructed command special characters, commands, etc. in the site search function. ...

CVE-2024-25327

Justice Systems FullCourt Enterprise v.8.2 is vulnerable to a Cross-Site Scripting (XSS) flaw within the Citation search function. A remote attacker can exploit the formatCaseNumber parameter to inject and execute arbitrary scripts, which may allow for redirecting victims, creating pop-ups, or lo...

PT-2024-20890 · Justice Systems · Justice Systems Fullcourt Enterprise

Name of the Vulnerable Software and Affected Versions: Justice Systems FullCourt Enterprise version 8.2 Description: A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code via the formatCaseNumber parameter of the Citation search function. This enables the attacker to...

CVE-2024-25327

Cross Site Scripting XSS vulnerability in Justice Systems FullCourt Enterprise v.8.2 allows a remote attacker to execute arbitrary code via the formatCaseNumber parameter of the Citation search function...

Cross site scripting

Cross Site Scripting vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the global search function...

CVE-2024-24275: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the global search function...

CVE-2024-24275

Cross Site Scripting vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the global search function...

PT-2024-21975 · Dotclear · Dotclear

Name of the Vulnerable Software and Affected Versions: Dotclear version 2.29 Description: A Reflected Cross-Site Scripting XSS issue has been identified in the Search functionality of the Admin Panel. Recommendations: For Dotclear version 2.29, consider disabling the Search functionality within t...