32 matches found
CVE-2022-26263
Yonyou u8 v13.0 was discovered to contain a DOM-based cross-site scripting XSS vulnerability via the component /u8sl/WebHelp...
EUVD-2010-2889
Malware in sbrugna...
EUVD-2021-33482
Malicious code in bioql PyPI...
The vulnerability of components such as EAI and UI (Oxygen XML WebHelp) in the Oracle Siebel CRM system for managing customer relationships allows attackers to gain unauthorized access to protected information or cause service failures.
The vulnerability of the EAI and UI Oxygen XML WebHelp components of the Oracle Siebel CRM system relates to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...
CVE-2023-22853
Tiki before 24.1, when featurecreatewebhelp is enabled, allows lib/structures/structlib.php PHP Object Injection because of an eval...
CVE-2021-46827
An issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1 build 2021090310. An XSS vulnerability in search terms proposals in online documentation generated using Oxygen XML WebHelp allows attackers to execute JavaScript by convincing a user to type specific...
CVE-2010-2885
Cross-site scripting XSS vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allows remote attackers to inject arbitrary web script or HTML via vectors related to WebHelp generation with RoboHelp for Word...
webhelp.acquitysoftware.com Cross Site Scripting vulnerability OBB-3414512
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-18729 · Tiki · Tiki
Name of the Vulnerable Software and Affected Versions: Tiki versions prior to 24.1 Description: The issue allows PHP Object Injection in lib/structures/structlib.php due to an eval when the feature create webhelp is enabled. Recommendations: For versions prior to 24.1, update to version 24.1 or...
CVE-2021-46827
An issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1 build 2021090310. An XSS vulnerability in search terms proposals in online documentation generated using Oxygen XML WebHelp allows attackers to execute JavaScript by convincing a user to type specific...
CVE-2021-46827
An issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1 build 2021090310. An XSS vulnerability in search terms proposals in online documentation generated using Oxygen XML WebHelp allows attackers to execute JavaScript by convincing a user to type specific...
CVE-2021-46827
An issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1 build 2021090310. An XSS vulnerability in search terms proposals in online documentation generated using Oxygen XML WebHelp allows attackers to execute JavaScript by convincing a user to type specific...
Cross site scripting
An issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1 build 2021090310. An XSS vulnerability in search terms proposals in online documentation generated using Oxygen XML WebHelp allows attackers to execute JavaScript by convincing a user to type specific...
CVE-2021-46827
An issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1 build 2021090310. An XSS vulnerability in search terms proposals in online documentation generated using Oxygen XML WebHelp allows attackers to execute JavaScript by convincing a user to type specific...
CVE-2021-46827
CVE-2021-46827 affects Oxygen XML WebHelp prior to 22.1 build 2021082006 and 23.x prior to 23.1 build 2021090310. The issue is an XSS in the search terms proposals feature of online documentation generated by WebHelp, enabling JavaScript execution when a user types crafted text into the WebHelp o...
PT-2022-12935
Name of the Vulnerable Software and Affected Versions Oxygen XML WebHelp versions prior to 22.1 build 2021082006 Oxygen XML WebHelp versions 23.x prior to 23.1 build 2021090310 Description An issue in Oxygen XML WebHelp allows attackers to execute JavaScript by convincing a user to type specific...
CVE-2021-46827: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1 build 2021090310. An XSS vulnerability in search terms proposals in online documentation generated using Oxygen XML WebHelp allows attackers to execute JavaScript by convincing a user to type specific...
Syncro Soft Oxygen XML WebHelp 跨站脚本漏洞
Syncro Soft Oxygen XML WebHelp is used by Syncro Soft Romania to convert DITA and DocBook resources to WebHelp output. A security vulnerability exists in Syncro Soft Oxygen XML WebHelp versions prior to 22.1 build 2021082006, 23.x prior to 23.1 build 2021090310, which stems from an XSS...