Business Logic Errors

microweber/microweber is vulnerable to business logic errors. The vulnerability exists in the login function of UserManager.php due to lack of validations in user headers which allows a malicious attacker to bypass IP detection and perform brute-force attacks...

IPPlan Cross-Site Scripting Vulnerability

IPPlan is a web-based multilingual TCP IP address management IPAM software and tracking tool. Simplifying the management of the IP address space, IPPlan version 4.92b is vulnerable to a cross-site scripting vulnerability, which stems from a cross-site scripting XSS vulnerability found in...

CVE-2021-42943: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting XSS in admin/usermanager.php over IPPlan v4.92b allows remote attackers to inject arbitrary web script or HTML via the userid parameter...