41 matches found
CVE-2022-27665
CVE-2022-27665 توجد ثغرة Reflected XSS عبر AngularJS Sandbox Escape Expressions في Progress/IPSwitch WSFTP Server 8.6.0 يمكن أن تؤدي إلى تنفيذ تعليمات برمجية وأوامر ضارة على جهة العميل بسبب عدم التعامل السليم مع المدخلات المقدمة من المستخدم. ومن خلال إدخال حمولات ضارة في شريط البحث بالدليل الفرعي...
EUVD-2007-4233
Malware in sbrugna...
CVE-2023-1110
The Yellow Yard Searchbar WordPress plugin before 2.8.12 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attack...
CVE-2022-2094
The Yellow Yard Searchbar WordPress plugin before 2.8.2 does not escape some URL parameters before outputting them back to the user, leading to Reflected Cross-Site Scripting...
CVE-2024-5137
A vulnerability classified as problematic was found in PHPGurukul Directory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php of the component Searchbar. The manipulation leads to cross site scripting. The attack can be launched...
CVE-2024-5137 PHPGurukul Directory Management System Searchbar admin-profile.php cross site scripting
A vulnerability classified as problematic was found in PHPGurukul Directory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php of the component Searchbar. The manipulation leads to cross site scripting. The attack can be launched...
CVE-2024-5123
A vulnerability classified as problematic has been found in SourceCodester Event Registration System 1.0. This affects an unknown part of the file /registrar/. The manipulation of the argument searchbar leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...
CVE-2024-5123 SourceCodester Event Registration System cross site scripting
A vulnerability classified as problematic has been found in SourceCodester Event Registration System 1.0. This affects an unknown part of the file /registrar/. The manipulation of the argument searchbar leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...
CVE-2024-5123 SourceCodester Event Registration System cross site scripting
A vulnerability classified as problematic has been found in SourceCodester Event Registration System 1.0. This affects an unknown part of the file /registrar/. The manipulation of the argument searchbar leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...
PT-2024-34612
Name of the Vulnerable Software and Affected Versions PHPGurukul Directory Management System version 1.0 Description A problematic issue was found in the Searchbar component of the file /admin/admin-profile.php, leading to cross site scripting. The attack can be launched remotely. Recommendations...
PT-2024-34568 · Unknown · Sourcecodester Event Registration System
Name of the Vulnerable Software and Affected Versions: SourceCodester Event Registration System version 1.0 Description: A problematic issue has been found in the system, affecting an unknown part of the file /registrar/. The manipulation of the searchbar argument leads to cross-site scripting. I...
CVE-2024-5123: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in SourceCodester Event Registration System 1.0. This affects an unknown part of the file /registrar/. The manipulation of the argument searchbar leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...
CVE-2024-5137: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in PHPGurukul Directory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php of the component Searchbar. The manipulation leads to cross site scripting. The attack can be launched...
Event Registration System 跨站脚本漏洞
Event Registration System is a QR code-based event registration system by Carlo Montero, a private developer. A cross-site scripting vulnerability exists in Event Registration System version 1.0, which originates from an unknown function in /registrar/ that leads to cross-site scripting via the...
CVE-2023-1110
The Yellow Yard Searchbar WordPress plugin before 2.8.12 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attack...
CVE-2023-1110
The Yellow Yard Searchbar WordPress plugin before 2.8.12 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attack...
CVE-2023-1110: Undefined Security Weakness
The Yellow Yard Searchbar WordPress plugin before 2.8.12 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attack...
PT-2023-16761
Name of the Vulnerable Software and Affected Versions The Yellow Yard Searchbar WordPress plugin versions prior to 2.8.12 Description The issue concerns the failure to validate and escape certain shortcode attributes in the plugin, which could allow users with the contributor role and above to...
Wordpress plugin Yellow Yard Searchbar 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
PT-2023-12912
Name of the Vulnerable Software and Affected Versions Progress Ipswitch WS FTP Server version 8.6.0 Description Reflected XSS exists due to improper handling of user-provided input, allowing execution of malicious code and commands on the client. This can be achieved by inputting malicious payloa...