11 matches found
EUVD-2022-1631
Malicious code in bioql PyPI...
Xain-Hotel Management System 2.5 Insecure Settings
==================================================================================================================================== | Title : Xain-Hotel Management System v2.5 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...
GHSA-5CHX-GG25-V37M Cross-site Scripting in xain
XSS is possible via the use of the order query parameter. An example request would look like: http://host/ressources?order=%27alert1;...
Cross-site Scripting in xain
XSS is possible via the use of the order query parameter. An example request would look like: http://host/ressources?order=%27alert1;...
Steve Pallen Xain Cross-Site Scripting Vulnerability
Steve Pallen Xain is a library that provides HTML markup for Elixir. A cross-site scripting vulnerability exists in versions of Steve Pallen Xain prior to 0.6.2, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of the 'order' parameter...
CVE-2018-20302
An XSS issue was discovered in Steve Pallen Xain before 0.6.2 via the order parameter...
CVE-2018-20302
An XSS issue was discovered in Steve Pallen Xain before 0.6.2 via the order parameter...
PT-2018-15302
Name of the Vulnerable Software and Affected Versions Steve Pallen Xain versions prior to 0.6.2 Description A cross-site scripting XSS issue was discovered, allowing for potential exploitation via the order parameter in a query. An example of a malicious request could be made to the API endpoint...
CVE-2018-20302
Steve Pallen Xain is affected by an XSS vulnerability in versions prior to 0.6.2, exploitable via the order parameter. The issue is reported across multiple sources (CVE-2018-20302, related advisories). Remediation: upgrade to Xain 0.6.2 or newer to mitigate.
