25 matches found
Spotweb <= 1.5.1 - Cross Site Scripting Detection
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the mail parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-site scripting XSS vulnerability in...
Spotweb <= 1.5.1 - Cross Site Scripting Detection
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the lastname parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-site scripting XSS vulnerability in...
Spotweb <= 1.5.1 - Cross Site Scripting Detection
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-site scripting XSS vulnerability in...
Spotweb <= 1.5.1 - Cross Site Scripting Detection
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the username parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-site scripting XSS vulnerability in...
Spotweb <= 1.5.1 - Cross Site Scripting (Reflected) Detection
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the firstname parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-site scripting XSS vulnerability in...
Spotweb <= 1.5.1 - Cross Site Scripting Detection
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword1 parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-site scripting XSS vulnerability in...
CVE-2021-40972
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the mail parameter...
CVE-2021-40973
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the lastname parameter...
CVE-2021-40972
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the mail parameter...
CVE-2021-40971
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword1 parameter...
CVE-2021-40969
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the firstname parameter...
CVE-2021-40970
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the username parameter...
CVE-2021-40968
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter...
PT-2021-23026
Name of the Vulnerable Software and Affected Versions spotweb versions 1.5.1 and below Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the newpassword1 parameter in the...
PT-2021-23028
Name of the Vulnerable Software and Affected Versions spotweb versions 1.5.1 and below Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the lastname parameter in the...
PT-2021-23023
Name of the Vulnerable Software and Affected Versions spotweb versions 1.5.1 and below Description The issue is a cross-site scripting XSS vulnerability in the templates/installer/step-004.inc.php file. This allows remote attackers to inject arbitrary web script or HTML via the firstname paramete...
CVE-2021-40970: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the username parameter...
PT-2021-23022
Name of the Vulnerable Software and Affected Versions spotweb versions 1.5.1 and below Description The issue allows remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter in the templates/installer/step-004.inc.php file. This enables cross-site scripting XSS attack...
CVE-2021-40972: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the mail parameter...
PT-2021-23027
Name of the Vulnerable Software and Affected Versions spotweb versions 1.5.1 and below Description The issue is a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML. This is achieved via the mail parameter in the...