154 matches found
CVE-2017-20191
A vulnerability was found in Zimbra zm-admin-ajax up to 8.8.1. It has been classified as problematic. This affects the function XFormItem.prototype.setError of the file WebRoot/js/ajax/dwt/xforms/XFormItem.js of the component Form Textbox Field Error Handler. The manipulation of the argument...
CVE-2017-20191 Zimbra zm-admin-ajax Form Textbox Field Error XFormItem.js XFormItem.prototype.setError cross site scripting
A vulnerability was found in Zimbra zm-admin-ajax up to 8.8.1. It has been classified as problematic. This affects the function XFormItem.prototype.setError of the file WebRoot/js/ajax/dwt/xforms/XFormItem.js of the component Form Textbox Field Error Handler. The manipulation of the argument...
PT-2023-21024 · Sourcecodester · Sourcecodester Water Billing System
Name of the Vulnerable Software and Affected Versions: SourceCodester Water Billing System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited via the lastname text box under the Add Client module. Cross-site scripting XSS...
SUSE CVE-2009-2905
Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service application crash or possibly execute arbitrary code via a request to display a crafted text dialog box...
SUSE CVE-2015-4519
Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers to bypass intended access restrictions and discover a redirect's target URL via crafted JavaScript code that executes after a drag-and-drop action of an image into a TEXTBOX element...
CVE-2022-1979
A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulnerability affects p=contact. The manipulation of the Message textbox with the input alert1 leads to cross site scripting. The attack can be initiated remotely but requires...
PT-2022-14231
Name of the Vulnerable Software and Affected Versions SourceCodester Product Show Room Site version 1.0 Description A vulnerability was found in the software, declared as problematic. It affects the p=contact parameter. The manipulation of the Message textbox with the input alert1 leads to...
CVE-2022-1980: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=systeminfo/contactinfo. The manipulation of the textbox Telephone with the input leads to cross site scripting. The attack may be initiated remotely b...
CVE-2022-1979: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulnerability affects p=contact. The manipulation of the Message textbox with the input leads to cross site scripting. The attack can be initiated remotely but requires authentication...
CVE-2022-30335
Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...
CVE-2022-30335: Improper Neutralization of Special Elements used in an SQL Command
Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...
PT-2022-20069
Name of the Vulnerable Software and Affected Versions Bonanza Wealth Management System BWM version 7.3.2 Description The issue allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted...
Banco Guayaquil 8.0.0 Cross Site Scripting Vulnerability
Banco Guayaquil for iOS version 8.0.0 suffers from a script insertion vulnerability where a user can insert malicious code into their own name and could possibly be leveraged for attacks upstream. Document Title: =============== Banco Guayaquil Versión 8.0.0 IOS - Cross Site Scripting Stored...
Banco Guayaquil 8.0.0 Cross Site Scripting
Document Title: =============== Banco Guayaquil Versión 8.0.0 IOS - Cross Site Scripting Stored Credits & Authors: ================== TaurusOmar - @TaurusOmar [email protected] taurusomar.com Vendor Homepage: https://apps.apple.com/ec/app/banco-guayaquil/id624963066 =============== Release...
Banco Guayaquil v8.0.0 iOS - Cross Site Web Vulnerability
Document Title: =============== Banco Guayaquil v8.0.0 iOS - Cross Site Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2315 Release Date: ============= 2022-01-21 Vulnerability Laboratory ID VL-ID: ====================================...
CVE-2020-23710
Cross Site Scripting XSS vulneraiblity in LimeSurvey 4.2.5 on textbox via the Notifications & data feature...
PT-2021-10933 · Unknown · Limesurvey
Name of the Vulnerable Software and Affected Versions: LimeSurvey version 4.2.5 Description: The issue is related to a Cross Site Scripting XSS vulnerability. This vulnerability can be exploited via the Notifications & data feature, specifically on a textbox. Recommendations: For LimeSurvey versi...
CVE-2020-23710: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulneraiblity in LimeSurvey 4.2.5 on textbox via the Notifications & data feature...
