Lucene search
K

8 matches found

OSV
OSV
added 2023/01/05 9:15 a.m.16 views

CVE-2021-4303

A vulnerability, which was classified as problematic, has been found in shannah Xataface up to 2.x. Affected by this issue is the function testftp of the file install/installform.js.php of the component Installer. The manipulation leads to cross site scripting. The attack may be launched remotely...

6.1CVSS6AI score
Exploits0References4
NVD
NVD
added 2023/01/05 9:15 a.m.7 views

CVE-2021-4303

A vulnerability, which was classified as problematic, has been found in shannah Xataface up to 2.x. Affected by this issue is the function testftp of the file install/installform.js.php of the component Installer. The manipulation leads to cross site scripting. The attack may be launched remotely...

6.1CVSS4AI score0.00303EPSS
Exploits0References4
Prion
Prion
added 2023/01/05 9:15 a.m.10 views

Cross site scripting

A vulnerability, which was classified as problematic, has been found in shannah Xataface up to 2.x. Affected by this issue is the function testftp of the file install/installform.js.php of the component Installer. The manipulation leads to cross site scripting. The attack may be launched remotely...

5.8CVSS6AI score0.00303EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2023/01/05 8:44 a.m.45 views

CVE-2021-4303

CVE-2021-4303 affects Xataface (PHP/MySQL) up to version 2.x, specifically the Installer component’s install_form.js.php testftp function. The issue enables cross-site scripting (XSS) due to lack of input sanitization. Impact is described as remote attack with no/low privilege required and user i...

6.1CVSS4.6AI score0.00303EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2023/01/05 8:44 a.m.10 views

CVE-2021-4303 shannah Xataface Installer install_form.js.php testftp cross site scripting

A vulnerability, which was classified as problematic, has been found in shannah Xataface up to 2.x. Affected by this issue is the function testftp of the file install/installform.js.php of the component Installer. The manipulation leads to cross site scripting. The attack may be launched remotely...

2CVSS6.2AI score0.00303EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2023/01/05 8:44 a.m.10 views

CVE-2021-4303 shannah Xataface Installer install_form.js.php testftp cross site scripting

A vulnerability, which was classified as problematic, has been found in shannah Xataface up to 2.x. Affected by this issue is the function testftp of the file install/installform.js.php of the component Installer. The manipulation leads to cross site scripting. The attack may be launched remotely...

2CVSS6.1AI score0.00303EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/01/05 12:0 a.m.2 views

PT-2023-12407 · Shannah · Xataface

Name of the Vulnerable Software and Affected Versions: shannah Xataface versions up to 2.x Description: A problematic issue has been found in the function testftp of the file install/install form.js.php of the component Installer, leading to cross site scripting. The attack may be launched...

6.1CVSS4AI score0.00303EPSS
Exploits0References9
Huntr
Huntr
added 2021/10/01 5:50 a.m.8 views

Cross-site Scripting (XSS) - Reflected in shannah/xataface

Description Cross-Site Scripting XSS attacks are a type of injection, in which malicious scripts are injected into websites. An attacker can use XSS to send a malicious script to an unsuspecting user. The end user’s browser has no way to know that the script should not be trusted, and will execut...

5.4AI score
Exploits0References2
Rows per page
Query Builder