15044 matches found
CVE-2023-47503
An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the template management module...
CVE-2023-47503
An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the template management module...
PT-2023-9818 · Foxit · Foxit Pdf Reader +1
Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PDF Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. The specific flaw exists within the handlin...
PT-2023-30467 · Jflyfox · Jfinalcms
Name of the Vulnerable Software and Affected Versions: jflyfox jfinalCMS version 5.1.0 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the "login.jsp" component in the template management module. Recommendations: For jflyfox jfinalCMS version 5.1....
VulnCheck KEV: CVE-2018-16159
The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the templateid parameter in a wp-admin/admin-ajax.php wpgvdoajaxfronttemplate request...
VulnCheck KEV: CVE-2022-46381
Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter e.g., to the badging/badgetemplatev0.php component. This affects 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e...
CSZCMS License Issue Vulnerability
CSZCMS is an open source web application that allows managing all content and settings on a website. An authorization issue vulnerability exists in CSZCMS version 1.3.0, which stems from an unknown function in the file view template in the component File Manager Page, resulting in a permissions...
CVE-2023-49214
Usedesk before 1.7.57 allows chat template injection...
CVE-2023-49214
Usedesk before 1.7.57 allows chat template injection...
CVE-2023-49214
Usedesk before 1.7.57 allows chat template injection...
Design/Logic Flaw
Usedesk before 1.7.57 allows chat template injection...
Malicious code in npm-base-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbd6b0cb182df5a8d0b8ec090754b8ebb6ad727eab4b962a671c5bd793cb031f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8600 Malicious code in npm-base-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbd6b0cb182df5a8d0b8ec090754b8ebb6ad727eab4b962a671c5bd793cb031f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-49214
CVE-2023-49214 affects Usedesk prior to version 1.7.57 and enables chat template injection. The vulnerability, described consistently across NVD/Red Hat/CNNVD listings, arises from template injection in chat functionality and scores as critical (CVSS 9.8: Network attack, no privileges required, n...
Usedesk Security Breach
Usedesk is a system for bookkeeping and processing applications from Usedesk, Inc. A security vulnerability exists in Usedesk versions prior to 1.7.57 that stems from the presence of a template injection vulnerability...
CVE-2023-49214
Usedesk before 1.7.57 allows chat template injection...
CVE-2023-49061
An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...
CVE-2023-49061
An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...
