CVE-2020-35721

Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the BrowseAssets.do file via the title parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

PT-2021-11833 · Quest · Quest Policy Authority

Name of the Vulnerable Software and Affected Versions: Quest Policy Authority version 8.1.2.200 Description: The issue allows remote attackers to inject malicious code into the browser via a specially crafted link to the "BrowseAssets.do" file using the title parameter. This affects products that...

PT-2021-11839 · Quest · Quest Policy Authority

Name of the Vulnerable Software and Affected Versions: Quest Policy Authority version 8.1.2.200 Description: The issue allows remote attackers to inject malicious code into the browser via a specially crafted link to the "BrowseDirs.do" file using the title parameter. This affects products that a...

Quest Software Policy Authority For Unified Communications Cross-Site Scripting Vulnerability

Quest Software Policy Authority For Unified Communications is a software from Quest Software, Inc. that is used in enterprise environments to consolidate communication data between various media text and instant messaging, video conferencing, email and voicemail. A cross-site scripting...

CVE-2020-35706

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen...

CVE-2020-35704

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen...

Cross site scripting

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen...

Cross site scripting

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen...

CVE-2020-35704

CVE-2020-35704 affects Daybyday version 2.1.0. The vulnerability is a stored cross-site scripting (XSS) flaw in the Title parameter of the New Lead screen, allowing an attacker-supplied payload to be stored and subsequently rendered to users. Primary impact is client-side data integrity and poten...

CVE-2020-35704

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen...

Bottelet Daybyday Crm 跨站脚本漏洞

Daybyday is a customer relationship management system. A stored cross-site scripting vulnerability exists in Daybyday 2.1.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the Title parameter of the New Lead screen...

Ornose15 NewPK SQL Injection Vulnerability

Ornose15 Newpk is a Php-based blog management platform from the individual developers at Ornose15. NewPK 1.1 version exists SQL injection vulnerability, the vulnerability stems from the title parameter adminnewpost.php does not do effective filtering of user input, attackers can use this...

CVE-2020-20189

SQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\newpost.php...

CVE-2020-20189

SQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\newpost.php...

Sql injection

SQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\newpost.php...

CVE-2020-20189

SQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\newpost.php...

Ornose15 Newpk SQL注入漏洞

Ornose15 Newpk is a Php-based blog management platform from the individual developers at Ornose15. NewPK 1.1 version exists SQL injection vulnerability, the vulnerability stems from the title parameter adminnewpost.php does not do effective filtering of user input, attackers can use this...

Observium Cross-Site Scripting Vulnerability (CNVD-2020-54790)

Observium is a low-maintenance auto-discovery network monitoring platform that supports multiple device types, platforms and operating systems. Observium suffers from a cross-site scripting vulnerability. An attacker can exploit the vulnerability to inject and store malicious JavaScript code via...

CVE-2020-13826

A CSV injection aka Excel Macro Injection or Formula Injection issue in i-doit 1.14.2 allows an attacker to execute arbitrary commands via a Title parameter that is mishandled in a CSV export...

CVE-2020-13826

A CSV injection aka Excel Macro Injection or Formula Injection issue in i-doit 1.14.2 allows an attacker to execute arbitrary commands via a Title parameter that is mishandled in a CSV export...