PT-2023-19368 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP version 2.4.167 Description: The issue allows for XSS via a network history name in the app/webroot/js/action table.js file. Recommendations: For MISP version 2.4.167, consider disabling the action table.js script until a patch is...

SQL Injection

calibreweb is vulnerable to sql injection. The vulnerability exists in moveheaderelements function in table.js entries of user table are visible which allows an attacker to inject malicious sql queries...