3943 matches found
PT-2023-16158 · Sourcecodester · Sourcecodester Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System affected versions not specified Description: A critical issue was found in the SourceCodester Online Food Ordering System, affecting some unknown functionality of the file view prod.php. The...
phpMyFAQ 跨站脚本漏洞
phpMyFAQ is a multilingual, fully database-driven FAQ system. phpMyFAQ versions prior to 3.1.10 are vulnerable to a cross-site scripting vulnerability that stems from the presence of stored cross-site scripting XSS. No detailed vulnerability details are currently available...
CVE-2023-0287 ityouknow favorites-web Comment cross site scripting
A vulnerability was found in ityouknow favorites-web. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Comment Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the...
WordPress plugin Media Library Folders 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
zerochplus 跨站脚本漏洞
zerochplus is zerochplus open source a threaded floating bulletin board script compatible with 2ch. A cross-site scripting vulnerability exists in zerochplus. Attackers exploit this vulnerability to perform cross-site scripting attacks...
eCart Web 4.0.0 Insecure Settings
==================================================================================================================================== | Title : eCart Web v4.0.0- Multi Vendor eCommerce Marketplace Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro /...
backdrop-contrib Basic Cart 跨站脚本漏洞
backdrop-contrib Basic Cart is a cms site for individual developers. A cross-site scripting vulnerability exists in backdrop-contrib Basic Cart. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...
PT-2023-10127 · Unknown · Mrobit Robitailletheknot
Name of the Vulnerable Software and Affected Versions: mrobit robitailletheknot affected versions not specified Description: A vulnerability was found in the component CSRF Token Handler, affecting an unknown part of the file app/filters.php. The manipulation of the argument token leads to...
maccms10 跨站脚本漏洞
maccms10 is magicblack open source PHP+MYSQL environment using a set of perfect and powerful rapid site-building system . maccms10 v2022.1000.3032 version of cross-site scripting XSS vulnerabilities. A cross-site scripting XSS vulnerability exists in maccms10 version v2022.1000.3032, which...
Sql injection
Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacker could exploit these vulnerabilities...
PT-2023-4802 · Unknown · Ckeditor Integration Ui +1
Name of the Vulnerable Software and Affected Versions: CKEditor Integration UI versions prior to 1.64.3 XWiki Platform versions prior to 14.6 RC1 Description: The issue is related to insufficient authentication checks for executed requests in the CKEditor integration interface of the XWiki...
WEIPDCRM 跨站脚本漏洞
WEIPDCRM is a Cydia repo manager open-sourced by 82Flex. A cross-site scripting vulnerability exists in WEIPDCRM. An attacker could exploit this vulnerability to perform cross-site scripting attacks...
Lead management system SQL注入漏洞
Lead management system is a lead management system developed by Mayuri K. The Lead Management System version 1.0 is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the login.php parameter username, and can be exploited by attackers to The...
nsupdate.info 安全漏洞
nsupdate.info is a free dynamic DNS service in the nsupdate.info development open source. A security vulnerability exists in nsupdate.info, which stems from a mishandling of the parameter CSRFCOOKIEHTTPONLY that results in a cookie without the "httponly" flag...
CVE-2022-47928
In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/uploadfile.ctp...
CVE-2022-46095
Sourcecodester Covid-19 Directory on Vaccination System 1.0 was discovered to contain a Cross-Site Scripting XSS vulnerability via verification.php because the program does not verify the txtvaccinationID parameter...
Cross-site Scripting (XSS)
Overview smoothie is a Smoothie Charts: smooooooth JavaScript charts for realtime streaming data Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper user input sanitization in strokeStyle and tooltipLabel properties. Exploiting this vulnerability is possib...
CVE-2022-38756
A vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes a request to the Post Office Agent that contains sensitive information in the query parameters that could be logged by any intervening HTTP proxies...
Japan Construction Information Center DENSHI NYUSATSU CORE SYSTEM 跨站脚本漏洞
Japan Construction Information Center DENSHI NYUSATSU CORE SYSTEM is a construction core management system from Japan Construction Information Center, Inc. A security vulnerability exists in the Japan Construction Information Center DENSHI NYUSATSU CORE SYSTEM that could allow an attacker to...