31 matches found
Emissary Cross-Site Scripting Vulnerability
Emissary is a software application. A P2P-based data-driven workflow engine that runs on heterogeneous and potentially widely distributed multi-tier P2P network computing resources. A cross-site scripting vulnerability exists in Emissary version 5.9.0, which can be exploited by an attacker to...
CVE-2021-32092
A Cross-site scripting XSS vulnerability in the DocumentAction component of U.S. National Security Agency NSA Emissary 5.9.0 allows remote attackers to inject arbitrary web script or HTML via the uuid parameter...
CVE-2021-32092
A Cross-site scripting XSS vulnerability in the DocumentAction component of U.S. National Security Agency NSA Emissary 5.9.0 allows remote attackers to inject arbitrary web script or HTML via the uuid parameter...
CVE-2021-32092
The CVE-2021-32092 issue affects NSA Emissary 5.9.0, specifically the DocumentAction component. A Cross-site Scripting (XSS) flaw allows remote attackers to inject arbitrary web script or HTML via the uuid parameter. The available connected documents confirm the vulnerable version and parameter, ...
FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-43411)
FusionPBX is an open source enterprise IPPBX interface management system based on FreeSWITHC. A cross-site scripting vulnerability exists in app/dialplans/dialplans.php in FusionPBX 4.4.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the appuuid...
Bludit - Directory Traversal Image File Upload Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Bludit Directory Traversal Image File Upload Vulnerability", 'Description' = %q This module exploits a vulnerability in Bludit. A remote user cou...
CVE-2010-3857
JBoss BRMS before 5.1.0 has a XSS vulnerability via asset=UUID parameter...
Cross site scripting
JBoss BRMS before 5.1.0 has a XSS vulnerability via asset=UUID parameter...
CVE-2010-3857
JBoss BRMS before 5.1.0 has an XSS vulnerability via the asset=UUID parameter. The issue stems from a lack of proper validation of client-side data by the web application, enabling an attacker to execute client-side code. Affected product: Red Hat JBoss BRMS prior to 5.1.0. Impact is XSS; CVSS sc...
SQL Injection
mysql-binuuid-rails is vulnerable to SQL injection. The vulnerability exists due to the lack of sanitization of user input data, allowing the arbitrary SQL commands to be injected via the UUID parameter...
MPS Box 0.1.8.0 - uuid SQL Injection
MPS Box 0.1.8.0 - uuid SQL Injection Exploit Title: MPS Box 0.1.8.0 - 'uuid' SQL Injection Dork: N/A Date: 2018-10-25 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.mpsbox.com/ Software Link: https://sourceforge.net/projects/mpsbox/files/latest/download Version: 0.1.8.0 Category: Webapp...