WinNMP 跨站脚本漏洞

WinNMP is a WinNMP package for quickly setting up a development server. A cross-site scripting vulnerability exists in WinNMP version 19.02, which stems from susceptibility to cross-site scripting XSS attacks that could allow an attacker to retrieve session details by submitting a specially craft...

PT-2024-36018 · Winnmp · Winnmp

Name of the Vulnerable Software and Affected Versions: WinNMP version 19.02 Description: A vulnerability has been discovered that allows for an XSS attack via the /tools/redis.php page, specifically in the k, hash, key, and p parameters. This could enable a remote user to submit a specially craft...

CVE-2021-45476

Yordam Library Information Document Automation product before version 19.02 has an unauthenticated reflected XSS vulnerability...

Information disclosure

Yordam Library Information Document Automation product before version 19.02 has an unauthenticated Information disclosure vulnerability...

CVE-2021-45475

CVE-2021-45475 affects Yordam Library Information Document Automation prior to version 19.02, exposing unauthenticated information disclosure. Affected product: Yordam Library Information Document Automation; vulnerable component/behavior: information disclosure due to unauthenticated access (no ...