Lucene search
+L

206 matches found

NVD
NVD
•added 2023/06/03 11:15 a.m.•45 views

CVE-2023-3085

A vulnerability, which was classified as problematic, has been found in X-WRT luci up to 22.10b202303061504. This issue affects the function runaction of the file modules/luci-base/ucode/dispatcher.uc of the component 404 Error Template Handler. The manipulation of the argument requestpath leads ...

6.1CVSS4.5AI score0.00489EPSS
SaveExploits0References4
Prion
Prion
•added 2023/06/03 11:15 a.m.•31 views

Cross site scripting

A vulnerability, which was classified as problematic, has been found in X-WRT luci up to 22.10b202303061504. This issue affects the function runaction of the file modules/luci-base/ucode/dispatcher.uc of the component 404 Error Template Handler. The manipulation of the argument requestpath leads ...

4CVSS6.1AI score0.00489EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/03 12:00 a.m.•3 views

CVE-2023-3085: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in X-WRT luci up to 22.10b202303061504. This issue affects the function runaction of the file modules/luci-base/ucode/dispatcher.uc of the component 404 Error Template Handler. The manipulation of the argument requestpath leads ...

6.1CVSS3.7AI score0.00489EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 6:21 a.m.•27 views

SUSE CVE-2002-1700

Cross-site scripting vulnerability XSS in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message...

4.3CVSS6.9AI score0.24274EPSS
SaveExploits1References3
OSV
OSV
•added 2022/12/27 3:15 p.m.•14 views

UBUNTU-CVE-2022-4729

A vulnerability was found in Graphite Web and classified as problematic. This issue affects some unknown processing of the component Template Name Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be...

5.4CVSS3.9AI score0.00761EPSS
SaveExploits1References6
OSV
OSV
•added 2022/12/15 9:30 p.m.•30 views

GHSA-287Q-JFCP-9VHV django-photologue vulnerable to Cross-site Scripting

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

6.1CVSS4.6AI score0.00538EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2022/12/15 9:30 p.m.•39 views

django-photologue vulnerable to Cross-site Scripting

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

6.1CVSS5.9AI score0.00538EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
•added 2022/12/15 9:15 p.m.•18 views

PYSEC-2022-43061

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

6.1CVSS5.9AI score0.00538EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2022/12/15 9:15 p.m.•25 views

PYSEC-2022-43061

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

6.1CVSS5.9AI score0.00538EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/12/15 12:00 a.m.•7 views

PT-2022-27451 · Unknown · Django-Photologue

Name of the Vulnerable Software and Affected Versions: django-photologue versions up to 3.15.1 Description: A vulnerability was found in the Default Template Handler component, specifically in the file photologue/templates/photologue/photo detail.html. The manipulation of the object.caption...

6.1CVSS5.8AI score0.00538EPSS
SaveExploits0References11
CVE
CVE
•added 2022/12/15 12:00 a.m.•107 views

CVE-2022-4526

The CVE-2022-4526 issue affects django-photologue versions up to 3.15.1. Affected code in photologue/templates/photologue/photo_detail.html, within the Default Template Handler, allows manipulation of the caption parameter (object.caption) to trigger cross-site scripting (XSS). The vulnerability ...

6.1CVSS4.7AI score0.00538EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/15 12:00 a.m.•0 views

CVE-2022-4526: Improper Neutralization

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

6.1CVSS3.7AI score0.00538EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/12/15 12:00 a.m.•29 views

CVE-2022-4526 django-photologue Default Template photo_detail.html cross site scripting

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

3.5CVSS6.1AI score0.00538EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/12/15 12:00 a.m.•12 views

Django-photologue 跨站脚本漏洞

Django-photologue is a powerful image management and gallery application for the Django web framework by Richard Barran, an individual developer. A security vulnerability exists in Django-photologue versions prior to 3.15.1, which stems from some unknown functionality in the Default Template...

6.1CVSS5.6AI score0.00538EPSS
SaveExploits0References4
NVD
NVD
•added 2022/12/06 10:15 a.m.•27 views

CVE-2022-4300

A vulnerability was found in FastCMS. It has been rated as critical. This issue affects some unknown processing of the file /template/edit of the component Template Handler. The manipulation leads to injection. The attack may be initiated remotely. The exploit has been disclosed to the public and...

8.8CVSS0.00816EPSS
SaveExploits1References2
Prion
Prion
•added 2022/12/06 10:15 a.m.•25 views

Design/Logic Flaw

A vulnerability was found in FastCMS. It has been rated as critical. This issue affects some unknown processing of the file /template/edit of the component Template Handler. The manipulation leads to injection. The attack may be initiated remotely. The exploit has been disclosed to the public and...

6.5CVSS9AI score0.00816EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/12/06 12:00 a.m.•16 views

PT-2022-26701 · Fastcms · Fastcms

Name of the Vulnerable Software and Affected Versions: FastCMS affected versions not specified Description: A critical issue affects the Template Handler component, specifically the /template/edit file, leading to injection when manipulated. This issue can be initiated remotely. Recommendations: ...

8.8CVSS8.7AI score0.00816EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2022/12/06 12:00 a.m.•9 views

CVE-2022-4300 FastCMS Template edit injection

A vulnerability was found in FastCMS. It has been rated as critical. This issue affects some unknown processing of the file /template/edit of the component Template Handler. The manipulation leads to injection. The attack may be initiated remotely. The exploit has been disclosed to the public and...

6.3CVSS7.6AI score0.00816EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/12/06 12:00 a.m.•39 views

CVE-2022-4300 FastCMS Template edit injection

A vulnerability was found in FastCMS. It has been rated as critical. This issue affects some unknown processing of the file /template/edit of the component Template Handler. The manipulation leads to injection. The attack may be initiated remotely. The exploit has been disclosed to the public and...

6.3CVSS9.2AI score0.00816EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/06 12:00 a.m.•4 views

CVE-2022-4300: Improper Neutralization

A vulnerability was found in FastCMS. It has been rated as critical. This issue affects some unknown processing of the file /template/edit of the component Template Handler. The manipulation leads to injection. The attack may be initiated remotely. The exploit has been disclosed to the public and...

8.8CVSS5.4AI score0.00816EPSS
SaveExploits1References3
Rows per page
Query Builder