EUVD-2021-25576

Malware in sbrugna...

Cross site scripting

GlobalNewFiles is a MediaWiki extension maintained by Miraheze. Prior to commit number cee254e1b158cdb0ddbea716b1d3edc31fa4fb5d, the username column of the GlobalNewFiles special page is vulnerable to a stored XSS. Commit number cee254e1b158cdb0ddbea716b1d3edc31fa4fb5d contains a patch. As a...

CVE-2021-39186

GlobalNewFiles is a MediaWiki extension maintained by Miraheze. Prior to commit number cee254e1b158cdb0ddbea716b1d3edc31fa4fb5d, the username column of the GlobalNewFiles special page is vulnerable to a stored XSS. Commit number cee254e1b158cdb0ddbea716b1d3edc31fa4fb5d contains a patch. As a...

CVE-2021-39186: Improper Input Validation

GlobalNewFiles is a MediaWiki extension maintained by Miraheze. Prior to commit number cee254e1b158cdb0ddbea716b1d3edc31fa4fb5d, the username column of the GlobalNewFiles special page is vulnerable to a stored XSS. Commit number cee254e1b158cdb0ddbea716b1d3edc31fa4fb5d contains a patch. As a...

PT-2021-22443

Name of the Vulnerable Software and Affected Versions GlobalNewFiles versions prior to commit cee254e1b158cdb0ddbea716b1d3edc31fa4fb5d Description The GlobalNewFiles special page is vulnerable to a stored XSS due to the lack of proper input validation in the username column. This issue can be...

Cross site scripting

Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard...

PT-2021-20537

Name of the Vulnerable Software and Affected Versions: Advantech WebAccess versions 8.4.2 through 8.4.4 Description: The issue allows for cross-site scripting XSS attacks via the username column of the "bwRoot.asp" page of WADashboard. This occurs because the application does not properly validat...

CVE-2021-34540: Improper Neutralization of Input During Web Page Generation

Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard...

vastal-itechmag.txt

Vastal I-Tech Mag Zone SQL Injection Vulnerability Author : Stack Script Home Page : http://www.vastal.com/mag-zone-online-library-system.html Demo : http://www.vastal.com/mag/ the exploit fate the password use ur mind for have the column username Exploit:...