3944 matches found
S-CMS 跨站脚本漏洞
S-CMS 3.0 has a cross-site scripting vulnerability, which can be exploited by attackers via the "Copyright" text box under "Basic Settings" to execute arbitrary Web scripts or HTML. The vulnerability can be exploited to execute arbitrary Web scripts or HTML via the "Copyright" text box under "Bas...
Unauthorized Access
webkit2gtk:edge is vulnerable to unauthorized access. A malicious website may be able to access restricted ports on arbitrary servers...
CVE-2020-36033
SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the id parameter to edituser.php...
Sourcecodester SourceCodester Water Billing System SQL注入漏洞
Sourcecodester SourceCodester Water Billing System is a water billing system from SourceCodester Sourcecodester, a U.S. company. SourceCodester Water Billing System has a security vulnerability. The vulnerability can be exploited by attackers to gain access to the database to obtain sensitive...
EVlink City、EVlink Parking 跨站脚本漏洞
Schneider Electric EVlink City and others are a charging solution for electric vehicle charging stations from Schneider Electric France. EVlink City, EVlink Parking, EVlink Smart Wallbox cross-site scripting vulnerability, which stems from the fact that when malicious parameters are submitted to...
Atlassian JIRA Server 跨站脚本漏洞
Atlassian JIRA Server is the server version of a defect tracking management system from Atlassian Australia. The system is mainly used for tracking and managing various types of issues and defects in work. A cross-site scripting vulnerability exists in Atlassian Jira Server, which can be exploite...
CVE-2021-36772
Zoho ManageEngine ADManager Plus before 7110 allows stored XSS...
MTN Group: HTML injection in email content during registration via FirstName/LastName parameter
Summary: Hi, I just found an issue when register account in https://mtnmobad.mtnbusiness.com.ng//auth/registerUser It allows an attacker to inject malicious text include html code in email content. Steps To Reproduce: 1. Go to https://uat.id.manulife.ca/mortgagecreditor/register?uilocales=en-CA. ...
WordPress 跨站脚本漏洞
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress's WP suffers from a cross-site scripting vulnerability that can be exploited by attackers ...
CVE-2021-26035
An issue was discovered in Joomla! 3.0.0 through 3.9.27. Inadequate escaping in the rules field of the JForm API leads to a XSS vulnerability...
WordPress 插件 输入验证错误漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. An input validation error vulnerability exist...
Vulnerabilities fixed in PHP7
PHP developers have fixed two vulnerabilities. The vulnerabilities allow a malicious party to cause a denial-of-service and to bypass a security measure. circumvention. PHP developers have made little information regarding these vulnerabilities publicly. PHP's developers have released updates to...
ZOHO ManageEngine Applications Manager 跨站脚本漏洞
ZOHO ManageEngine Applications Manager is an IT operations management solution from ZOHO, Inc. ZOHO ManageEngine Applications Manager is vulnerable to a cross-site scripting vulnerability that could be exploited to execute malicious JavaScript...
pandorafms跨站脚本漏洞
"Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. through visualization.A stored cross-site scripting vulnerability exists in Pandora FMS 7.54 and earlier versions. An attacker could exploit this...
PT-2021-20055 · Oracle · Oracle Glassfish Server
Name of the Vulnerable Software and Affected Versions: Oracle GlassFish Server versions 3.1.2.18 and below Description: The issue allows a malicious user to cause an administrator user to supply dangerous content to the vulnerable page, which is then reflected back to the user and executed by the...
PHPGurukul Hospital Management System SQL注入漏洞
PHPGurukul Hospital Management System is a web application for hospitals to manage doctors and patients. A SQL injection vulnerability exists in \hms\edit-profile.php in PHPGurukul Hospital Management System version 4.0. An attacker can exploit this vulnerability to obtain sensitive information...
GHSA-P2C4-GXP4-J3XP Denial of service in Valine
Valine is a fast, simple & powerful comment system. Valine 1.4.14 allows remote attackers to cause a denial of service application outage by supplying a ua aka User-Agent value that only specifies the product and version...
Greenbone Security Assistant 跨站脚本漏洞
Greenbone Security Assistant GSA is a web interface.Greenbone Security Assistant is a web interface developed for the Greenbone Security Manager appliance. A cross-site scripting vulnerability exists in Greenbone Security Assistant GSA versions prior to 8.0.2 and Greenbone OS GOS versions prior t...
HisiPHP 跨站脚本漏洞
HisiPHP is a ThinkPHP and Layui based on the development of a common back-end management framework open source and free , the default integration of permissions management , module management , plug-in management , hooks management , database management and other commonly used features to...