CVE-2024-50677

CVE-2024-50677 | OroPlatform CMS v5.1의 두 번 클릭 반사형 XSS 이 저장소는 CVE-2024-50677의 개념 증명을 제공합니다. 면책 조항: 이 코드는 취약점의 개념 증명입니다. 저는 이 익스플로잇의 사용에 대해 책임을 지지 않습니다. 설명: CVE-2024-50677은 OroPlatform CMS v5.1의 기본 구성, 특히 여기 데모 플랫폼https://github.com/oroinc/docker-demo에 존재하는 두 번 클릭 반사형 XSS를 나타냅니다. 취약점은 애플리케이션이 검색 기능...

Trol InterMedia 2ClickPortal SQL注入漏洞

Trol InterMedia 2ClickPortal is a web portal from Trol InterMedia, Inc. Trol InterMedia 2ClickPortal suffers from a SQL injection vulnerability that stems from improper neutralization of the changesreferenceid parameter input, which could lead to a blind Boolean-based SQL injection attack...

CVE-2024-5961

Improper neutralization of input during web page generation vulnerability in 2ClickPortal software allows reflected cross-site scripting XSS. An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser. This issue affects 2ClickPortal software...

JIRA is vulnerable to clickjacking attacks

A clickjacking attack on JIRA would most likely take the form of a third-party site, containing an invisible iframe on top of an unrelated page. The iframe would contain a page in JIRA. The victim would believe he was clicking on the other site but would actually be clicking in JIRA and performin...