Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-41792

Malicious code in bioql PyPI...

8.2CVSS5.8AI score0.00291EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 7:35 p.m.8 views

CVE-2022-39301

sra-admin is a background rights management system that separates the front and back end. sra-admin version 1.1.1 has a storage cross-site scripting XSS vulnerability. After logging into the sra-admin background, an attacker can upload an html page containing xss attack code in "Personal Center" ...

8.2CVSS6AI score0.00291EPSS
Exploits1References1
NVD
NVD
added 2022/10/19 2:15 p.m.12 views

CVE-2022-39301

sra-admin is a background rights management system that separates the front and back end. sra-admin version 1.1.1 has a storage cross-site scripting XSS vulnerability. After logging into the sra-admin background, an attacker can upload an html page containing xss attack code in "Personal Center" ...

8.2CVSS0.00291EPSS
Exploits1References1
Prion
Prion
added 2022/10/19 2:15 p.m.8 views

Cross site scripting

sra-admin is a background rights management system that separates the front and back end. sra-admin version 1.1.1 has a storage cross-site scripting XSS vulnerability. After logging into the sra-admin background, an attacker can upload an html page containing xss attack code in "Personal Center" ...

4.9CVSS5.4AI score0.00291EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2022/10/19 12:0 a.m.1 views

CVE-2022-39301 sra-admin is vulnerable to storage cross-site scripting (XSS) via unrestricted file upload

sra-admin is a background rights management system that separates the front and back end. sra-admin version 1.1.1 has a storage cross-site scripting XSS vulnerability. After logging into the sra-admin background, an attacker can upload an html page containing xss attack code in "Personal Center" ...

8.2CVSS6.3AI score0.00291EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/10/19 12:0 a.m.1 views

sra-admin 代码问题漏洞

sra-admin is a front-end and back-end separation, out-of-the-box backend permissions management system by momofoolish individual developers. A code issue vulnerability exists in sra-admin version 1.1.1. An attacker can exploit this vulnerability to steal user's personal information by uploading a...

8.2CVSS5.6AI score0.00291EPSS
Exploits1References2
CVE
CVE
added 2022/10/19 12:0 a.m.44 views

CVE-2022-39301

CVE-2022-39301 concerns sra-admin, a front/back-end separated rights management system. The issue affects version 1.1.1, where a storage cross-site scripting (XSS) vulnerability lies in the Profile Picture Upload under Personal Center. An attacker who logs in could upload an HTML page containing ...

8.2CVSS5.7AI score0.00291EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/10/19 12:0 a.m.10 views

CVE-2022-39301 sra-admin is vulnerable to storage cross-site scripting (XSS) via unrestricted file upload

sra-admin is a background rights management system that separates the front and back end. sra-admin version 1.1.1 has a storage cross-site scripting XSS vulnerability. After logging into the sra-admin background, an attacker can upload an html page containing xss attack code in "Personal Center" ...

8.2CVSS7.8AI score0.00291EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2022/10/19 12:0 a.m.3 views

CVE-2022-39301 sra-admin is vulnerable to storage cross-site scripting (XSS) via unrestricted file upload

sra-admin is a background rights management system that separates the front and back end. sra-admin version 1.1.1 has a storage cross-site scripting XSS vulnerability. After logging into the sra-admin background, an attacker can upload an html page containing xss attack code in "Personal Center" ...

8.2CVSS7.8AI score0.00291EPSS
Exploits1References1
Rows per page
Query Builder