4033 matches found
CVE-2023-51371
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bit Assist Chat Widget: WhatsApp Chat, Facebook Messenger Chat, Telegram Chat Bubble, Line Messenger, Live Chat Support Chat Button, WeChat, SMS, Call Button, Customer Support Button with floating...
PT-2023-31703 · WordPress · Beaver Builder
Name of the Vulnerable Software and Affected Versions: Beaver Builder – WordPress Page Builder versions through 2.7.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This affects the...
Exploit for CVE-2021-3205
CVE-2021-3205-websvn-2.6.0 This is a exploit of CVE-2021-3205...
Weseek GROWI Cross-Site Scripting Vulnerability
Weseek GROWI is a team collaboration software from Weseek Japan. A cross-site scripting vulnerability exists in Weseek GROWI versions prior to v6.0.0, which originates from cross-site scripting in the anchor tag and can be exploited by an attacker to execute arbitrary script on a user's web brows...
Nipah virus Testing Management System SQL Injection Vulnerability
Nipah Virus Testing Management System is an online virus diagnostic platform. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul Nipah Virus Testing Management System, which stems from some unknown processing in bwdates-report-result.php that leads to SQL injection via the...
IBM Aspera Console 跨站脚本漏洞
IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM Aspera Console that stems from the application's lack of effective filtering and escaping of user-supplied...
CVE-2023-51051
S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the Atextauth parameter at /admin/ajax.php...
PT-2023-30895 · Unknown · Railway Reservation System
Name of the Vulnerable Software and Affected Versions: Railway Reservation System version 1.0 Description: The issue concerns an Unauthenticated SQL Injection vulnerability. Specifically, the user parameter of the "login.php" resource does not validate the characters received and they are sent...
The vulnerability of microprogrammed software in LTE network management systems like Baicells RTS & RTD allows a hacker to execute arbitrary code with root privileges.
The vulnerability of the microprogramming software used in LTE network management systems like Baicells RTS & RTD exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges by...
PT-2023-32462
Name of the Vulnerable Software and Affected Versions LioXERP versions prior to v.146 Description The issue is related to an improper neutralization of input during web page generation, which allows for Cross-site Scripting XSS. Specifically, it enables an authenticated user to execute Stored XSS...
CVE-2023-49180
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ternstyle LLC Automatic Youtube Video Posts Plugin allows Stored XSS.This issue affects Automatic Youtube Video Posts Plugin: from n/a through 5.2.2...
Adobe Experience Manager cross-site scripting vulnerability (CNVD-2024-0268747)
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...
CVE-2023-50565
A cross-site scripting XSS vulnerability in the component /logs/dopost.html in RPCMS v3.5.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
PT-2023-31589 · Rpcms · Rpcms
Name of the Vulnerable Software and Affected Versions: RPCMS version 3.5.5 Description: A cross-site scripting XSS issue in the component "/logs/dopost.html" allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations: For RPCMS version 3.5.5, consider disabli...
Adobe Experience Manager 跨站脚本漏洞
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...
Adobe Experience Manager 跨站脚本漏洞
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...
CVE-2023-49490
XunRuiCMS v4.5.5 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin.php...
The vulnerability of the ajax.php implementation of the Courier Management System allows a perpetrator to execute arbitrary commands.
The vulnerability of the ajax.php implementation of the Courier Management System’s courier service management module is related to the lack of protective measures for the SQL query structure when processing the email parameter. Exploiting this vulnerability allows an attacker who operates remote...
Tongda OA SQL Injection Vulnerability
Tongda2000 is a web-based intelligent office system from China Tongda Tongda. Tongda OA 2017 11.10 and earlier versions suffer from a SQL injection vulnerability that originates from the presence of an unknown function in general/wiki/cp/manage/delete.php, which leads to SQL injection via the...