EUVD-2022-52135

Malicious code in bioql PyPI...

CVE-2022-4875

A vulnerability has been found in fossology and classified as problematic. This vulnerability affects unknown code. The manipulation of the argument sql/VarValue leads to cross site scripting. The attack can be initiated remotely. The patch is identified as 8e0eba001662c7eb35f045b70dd458a4643b455...

FOSSology 跨站脚本漏洞

FOSSology is an open source license compliance software system and toolkit from FOSSology Open Source. License, copyright and export control scans can be run from the command line. A cross-site scripting vulnerability exists in FOSSology, which originates from unknown code effects, where...

PT-2023-15889 · Fossology · Fossology

Name of the Vulnerable Software and Affected Versions: fossology affected versions not specified Description: A vulnerability has been found in fossology and classified as problematic. This issue affects unknown code and can be exploited remotely. The manipulation of the argument sql/VarValue lea...

CVE-2022-4875: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in fossology and classified as problematic. This vulnerability affects unknown code. The manipulation of the argument sql/VarValue leads to cross site scripting. The attack can be initiated remotely. The patch is identified as 8e0eba001662c7eb35f045b70dd458a4643b455...

oc-server3 跨站脚本漏洞

oc-server3 is an open source geography teaching website by Opencaching Deutschland. A security vulnerability exists in Opencaching Deutschland oc-server3, which stems from a cross-site scripting vulnerability due to incorrect manipulation of the parameter varvalue...

CVE-2022-4514: Improper Neutralization

A vulnerability, which was classified as problematic, was found in Opencaching Deutschland oc-server3. Affected is an unknown function of the file htdocs/lang/de/ocstyle/varset.inc.php. The manipulation of the argument varvalue leads to cross site scripting. It is possible to launch the attack...

CVE-2022-4514

A vulnerability, which was classified as problematic, was found in Opencaching Deutschland oc-server3. Affected is an unknown function of the file htdocs/lang/de/ocstyle/varset.inc.php. The manipulation of the argument varvalue leads to cross site scripting. It is possible to launch the attack...

CVE-2018-17131

admin/webconfig.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the varvalue field...

PHPMyWind Arbitrary Code Execution Vulnerability (CNVD-2018-19540)

PHPMyWind is a set of PHP and MySQL-based and W3C-compliant enterprise website building solutions. A security vulnerability exists in the admin/webconfig.php file in PHPMyWind version 5.5. A remote attacker can exploit this vulnerability to execute arbitrary code with the help of the varvalue fie...

CVE-2018-17131: Improper Control of Generation of Code

admin/webconfig.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the varvalue field...

PT-2018-13912

Name of the Vulnerable Software and Affected Versions PHPMyWind version 5.5 Description The issue allows admin users to execute arbitrary code via the varvalue field in the admin/web config.php file. Recommendations For PHPMyWind version 5.5, restrict access to the admin/web config.php file to...