1050 matches found
CVE-2023-22585
The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter...
Cross site scripting
The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter...
CVE-2023-22585 Reflected Cross-Site Scripting in Danfoss AK-EM100
The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter...
Danfoss AK-EM100 web applications 跨站脚本漏洞
Danfoss AK-EM100 web applications is a web application from Danfoss, Denmark. It provides the store's web-based graphical user interface, which allows a range of everyday users to locally or remotely monitor data, alarms, and reports on all of their refrigeration equipment. A security vulnerabili...
PT-2023-18570 · Danfoss · Danfoss Ak-Em100
Name of the Vulnerable Software and Affected Versions: Danfoss AK-EM100 affected versions not specified Description: The issue concerns Reflected Cross-Site Scripting in the title parameter of the web application. This allows for potential malicious script injection. Recommendations: At the momen...
SourceCodester Online Discussion Forum Site 跨站脚本漏洞
SourceCodester Online Discussion Forum Site is an application from SourceCodester, Inc. An Online Discussion Forum. A cross-site scripting vulnerability exists in Online Discussion Forum Site version 1.0, which stems from cross-site scripting due to incorrect manipulation of the parameter title...
Chamilo LMS 跨站脚本漏洞
Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, distance training, and online question and answer sessions. A security vulnerability exists in Chamilo LMS version v.1.11.18. A local...
CVE-2023-31800
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the forum title parameter...
CVE-2023-31800
CVE-2023-31800 : Chamilo LMS version 1.11.18 is affected by a Cross Site Scripting (XSS) vulnerability in the forum title parameter that could allow a local attacker to execute arbitrary code. The provided connected documents confirm the affected product/version and the vulnerable parameter but d...
Cross site scripting
Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title parameter...
CVE-2023-27090
Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title parameter...
Campcodes Advanced Online Voting System 跨站脚本漏洞
Campcodes Advanced Online Voting System is an online voting system. A cross-site scripting vulnerability exists in Campcodes Advanced Online Voting System v1.0. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the parameter title of the file...
SourceCodester Survey Application System 跨站脚本漏洞
Survey Application System is a survey application system by Carlo Montero Individual Developer. A cross-site scripting vulnerability exists in SourceCodester Survey Application System version 1.0, which stems from a problem with the component Add New Handler, where manipulation of the parameter...
CVE-2020-36074
SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the title parameter...
CVE-2020-36074
SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the title parameter...
PT-2023-11804
Name of the Vulnerable Software and Affected Versions Tailor Mangement System version 1 Description A SQL injection issue allows a remote attacker to execute arbitrary code via the title parameter. This enables the attacker to potentially access or modify sensitive data. Recommendations For Tailo...
CVE-2020-36074
SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the title parameter...
CVE-2023-26776
Cross Site Scripting vulnerability found in Monitorr v.1.7.6 allows a remote attacker to execute arbitrary code via the title parameter of the postreceiver-services.php file...
CVE-2020-20913
SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basictitle parameter...
CVE-2020-23327
Cross Site Scripting vulnerability found in ZblogCN ZblogPHP v.1.0 allows a local attacker to execute arbitrary code via a crafted payload in title parameter of the module management model...