Dreamer CMS 4.0.01 is vulnerable to SQL Injection.Read More ...
Continue ReadingNovember 17, 2022
Hustoj 22.09.22 has a XSS Vulnerability in /admin/problem_judge.php.Read More ...
Continue ReadingNovember 17, 2022
SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.phpRead More ...
Continue ReadingNovember 17, 2022
The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users with administrator privileges to perform cross-site scripting (XSS).Read More ...
Continue ReadingNovember 17, 2022
BKG Professional NtripCaster 2.0.39 allows querying information over the UDP protocol without authentication. The NTRIP sourcetable is typically quite long (tens of kBs) and can be requested with a pa ...
Continue ReadingNovember 17, 2022
Keyfactor EJBCA before 7.10.0 allows XSS.Read More ...
Continue ReadingNovember 17, 2022
A stored XSS vulnerability was discovered in adminweb/ra/viewendentity.jsp in PrimeKey EJBCA through 7.9.0.2. A low-privilege user can store JavaScript in order to exploit a higher-privilege user.Read ...
Continue ReadingNovember 17, 2022
The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers to perform Cross-site Scripting attacks on admin panel users by manipulating the ...
Continue ReadingNovember 17, 2022
Back to Main