CVE-2022-39220 XSS Vulnerabilities in WebClient

SFTPGo is an SFTP server written in Go. Versions prior to 2.3.5 are subject to Cross-site scripting XSS vulnerabilities in the SFTPGo WebClient, allowing remote attackers to inject malicious code. This issue is patched in version 2.3.5. No known workarounds exist...

Argo CD's external URLs for Deployments can include JavaScript

Impact All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to a cross-site scripting XSS bug allowing a malicious user to inject a javascript: link in the UI. When clicked by a victim user, the script will execute with the victim's permissions up to and including admin. The scri...

FineCMS v2.3.5 /member/index.php SQL注入漏洞

No description provided by source...

joomlachrono-rfi.txt

+By CrackersChild+ Script.......: CHRONOFORMS version V2.3.5 Down.........: http://www.joomlaos.de/option,comremository/Itemid,41/func,startdown/id,2810.html Author.......: CrackersChild | [email protected] & [email protected] Class........: Remote File İnclude Vulnerability...