Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a forum post.Read More ...
Continue Reading
September 05, 2022
Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a direct message (DM).Read More ...
Continue Reading
September 05, 2022
An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be run later by any other agent when clicking the customer URL link. Then the stored ...
Continue Reading
September 05, 2022
An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS.Read More ...
Continue Reading
September 05, 2022
Attacker might be able to execute malicious Perl code in the Template toolkit, by having the admin installing an unverified 3th party packageRead More ...
Continue Reading
September 05, 2022
A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System. Affected by this vulnerability is an unknown functionality of the file index.php of the component ...
Continue Reading
September 05, 2022
The tinygltf library uses the C library function wordexp() to perform file path expansion on untrusted paths that are provided from the input file. This function allows for command injection by using ...
Continue Reading
September 05, 2022
This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...
Continue Reading
September 05, 2022
Back to Main
