289 matches found
Missing length validation of user displayname allows to generate an SQL error
None...
CVE-2021-39018
IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose sensitive information in a SQL error message that could aid in further attacks against the system. IBM X-Force ID: 213726...
Information disclosure
IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose sensitive information in a SQL error message that could aid in further attacks against the system. IBM X-Force ID: 213726...
CVE-2021-39018
IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose sensitive information in a SQL error message that could aid in further attacks against the system. IBM X-Force ID: 213726...
PT-2022-10842
Name of the Vulnerable Software and Affected Versions IBM Engineering Lifecycle Optimization - Publishing versions 6.0.6 through 7.0.2 Description The issue could disclose sensitive information in a SQL error message, potentially aiding in further attacks against the system. Recommendations For...
CVE-2021-39018: Generation of Error Message Containing Sensitive Information
IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose sensitive information in a SQL error message that could aid in further attacks against the system. IBM X-Force ID: 213726...
CVE-2021-39018
IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose sensitive information in a SQL error message that could aid in further attacks against the system. IBM X-Force ID: 213726...
Cross-site Scripting (XSS)
dolibarr/dolibarr is vulnerable to cross-site scripting. An attacker is able to inject and execute malicious script as it does not handle SQL error page properly...
GHSA-F2G5-426F-353Q Cross-site Scripting in Dolibarr
Dolibarr 12.0.5 is vulnerable to Cross Site Scripting XSS via Sql Error Page...
Cross-site Scripting in Dolibarr
Dolibarr 12.0.5 is vulnerable to Cross Site Scripting XSS via Sql Error Page...
CVE-2022-30875
Dolibarr 12.0.5 is vulnerable to Cross Site Scripting XSS via Sql Error Page...
CVE-2022-30875
Dolibarr 12.0.5 is vulnerable to Cross Site Scripting XSS via Sql Error Page...
CVE-2022-30875
Dolibarr 12.0.5 is vulnerable to Cross Site Scripting XSS via Sql Error Page...
Cross site scripting
Dolibarr 12.0.5 is vulnerable to Cross Site Scripting XSS via Sql Error Page...
CVE-2022-30875
CVE-2022-30875 affects Dolibarr 12.0.5 and is described as a Cross-Site Scripting (XSS) vulnerability exploitable via the SQL Error Page. The connected records reiterate the same issue across multiple repositories (Red Hat, OSV, CNVD, GHSA, etc.) but do not provide concrete technical details beyo...
CVE-2022-30875
Dolibarr 12.0.5 is vulnerable to Cross Site Scripting XSS via Sql Error Page...
CVE-2022-30875
Dolibarr 12.0.5 is vulnerable to Cross Site Scripting XSS via Sql Error Page...
PT-2022-20362 · Dolibarr · Dolibarr
Name of the Vulnerable Software and Affected Versions: Dolibarr version 12.0.5 Description: The issue is related to Cross Site Scripting XSS via the Sql Error Page. This means that an attacker could potentially inject malicious scripts into the website, which would then be executed by the user's...
