CVE-2024-10723

A stored cross-site scripting XSS vulnerability was discovered in phpipam/phpipam version 1.5.2. This vulnerability allows an attacker to inject malicious scripts into the destination address field of the NAT tool, which can be executed when a user interacts with the field. The impact of this...

CVE-2024-10723 Stored XSS in phpipam/phpipam

A stored cross-site scripting XSS vulnerability was discovered in phpipam/phpipam version 1.5.2. This vulnerability allows an attacker to inject malicious scripts into the destination address field of the NAT tool, which can be executed when a user interacts with the field. The impact of this...

snipe-it cross-site scripting vulnerability (CNVD-2022-36053)

Snipe-IT is an open source IT asset/license management system. snipe-IT has a security vulnerability that can be exploited by attackers to steal user cookies...

ThinkSAAS 2.2-beta 存储型XSS

简要描述： 富文本过滤不严格导致可植入恶意脚本盗取用户cookies 详细说明： 对比了一下 WooYun: Thinksaas存储型XSS ，发现确实更新了。我就无耻的来了。 下面是对富文本过滤的代码片段： function cleanJs$text $text = trim $text ; //$text = stripslashes $text ; // 完全过滤注释 $text = pregreplace '//', '', $text ; // å®Œå…¨è¿‡æ»¤åŠ¨æ€ä»£ç  $text = pregreplace '//', '',...