Casdoor 安全漏洞

Casdoor is an open source platform from Casdoor Open Source that supports multiple authentication and authorization protocols. A security vulnerability exists in Casdoor versions prior to 2.26.0, which stems from a flaw in the permission validation module and editing interface that could lead to ...

SUSE CVE-2021-29662

The Data::Validate::IP module through 0.29 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses...

PT-2014-8466

Name of the Vulnerable Software and Affected Versions Webform Validation module versions 6.x-1.x before 6.x-1.6 Webform Validation module versions 7.x-1.x before 7.x-1.4 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with specific permissions to inject...

FortiWeb 4kC,3kC,1kC & VA - Cross Site Vulnerabilities

Document Title: =============== FortiWeb 4kC,3kC,1kC & VA - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=702 http://www.fortiguard.com/advisory/FG-IR-012-008.html CVE ID: 2012-6346 Release Date: ============= 2012-12-02...

FortiWeb 4kC / 3kC / 1kC / VA Cross Site Scripting

FortiWeb 4kC, 3kC, 1kC, and VA suffer from multiple cross site scripting vulnerabilities. FortiWeb 4kC,3kC,1kC & VA - Cross Site Vulnerabilities Introduction: ============= FortiWeb web application firewalls protect, balance, and accelerate your web applications, databases, and any information...

CVE-2011-5189

Cross-site scripting XSS vulnerability in the Webform Validation module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with permissions to "update Webform nodes" to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-2166

Name of the Vulnerable Software and Affected Versions Webform Validation module versions 6.x-1.x before 6.x-1.5 Webform Validation module versions 7.x-1.x before 7.x-1.1 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote authenticated users with...