3943 matches found
TOTOLINK N200RE 操作系统命令注入漏洞
The TOTOLINK N200RE is a wireless broadband router for small office or home SOHO environments. The TOTOLINK N200RE suffers from a command injection vulnerability that stems from a failure to properly filter the command parameter of the setTracerouteCfg function on the /cgi-bin/cstecgi.cgi page fo...
The vulnerability of Adobe Experience Manager’s content and media data management system, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.
The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks...
CVE-2023-51371
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bit Assist Chat Widget: WhatsApp Chat, Facebook Messenger Chat, Telegram Chat Bubble, Line Messenger, Live Chat Support Chat Button, WeChat, SMS, Call Button, Customer Support Button with floating...
CVE-2023-51361
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ginger Plugins Sticky Chat Widget: Click to chat, SMS, Email, Messages, Call Button, Live Chat and Live Support Button allows Stored XSS.This issue affects Sticky Chat Widget: Click to chat, SMS,...
PT-2023-31703 · WordPress · Beaver Builder
Name of the Vulnerable Software and Affected Versions: Beaver Builder – WordPress Page Builder versions through 2.7.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This affects the...
Exploit for CVE-2021-3205
CVE-2021-3205-websvn-2.6.0 This is a exploit of CVE-2021-3205...
Weseek GROWI Cross-Site Scripting Vulnerability
Weseek GROWI is a team collaboration software from Weseek Japan. A cross-site scripting vulnerability exists in Weseek GROWI versions prior to v6.0.0, which originates from cross-site scripting in the anchor tag and can be exploited by an attacker to execute arbitrary script on a user's web brows...
Nipah virus Testing Management System SQL Injection Vulnerability
Nipah Virus Testing Management System is an online virus diagnostic platform. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul Nipah Virus Testing Management System, which stems from some unknown processing in bwdates-report-result.php that leads to SQL injection via the...
IBM Aspera Console 跨站脚本漏洞
IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM Aspera Console that stems from the application's lack of effective filtering and escaping of user-supplied...
CVE-2023-51051
S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the Atextauth parameter at /admin/ajax.php...
PT-2023-32462
Name of the Vulnerable Software and Affected Versions LioXERP versions prior to v.146 Description The issue is related to an improper neutralization of input during web page generation, which allows for Cross-site Scripting XSS. Specifically, it enables an authenticated user to execute Stored XSS...
PT-2023-30895 · Unknown · Railway Reservation System
Name of the Vulnerable Software and Affected Versions: Railway Reservation System version 1.0 Description: The issue concerns an Unauthenticated SQL Injection vulnerability. Specifically, the user parameter of the "login.php" resource does not validate the characters received and they are sent...
The vulnerability of microprogrammed software in LTE network management systems like Baicells RTS & RTD allows a hacker to execute arbitrary code with root privileges.
The vulnerability of the microprogramming software used in LTE network management systems like Baicells RTS & RTD exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges by...
CVE-2023-49180
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ternstyle LLC Automatic Youtube Video Posts Plugin allows Stored XSS.This issue affects Automatic Youtube Video Posts Plugin: from n/a through 5.2.2...
Adobe Experience Manager cross-site scripting vulnerability (CNVD-2024-0268747)
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...
CVE-2023-50565
A cross-site scripting XSS vulnerability in the component /logs/dopost.html in RPCMS v3.5.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
PT-2023-31589 · Rpcms · Rpcms
Name of the Vulnerable Software and Affected Versions: RPCMS version 3.5.5 Description: A cross-site scripting XSS issue in the component "/logs/dopost.html" allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations: For RPCMS version 3.5.5, consider disabli...
Adobe Experience Manager 跨站脚本漏洞
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...
Adobe Experience Manager 跨站脚本漏洞
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...