Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2024-2530 | MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 /admin/update-rooms.php id cross site scripting


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/update-rooms.php. The manipulation of the argument id leads to cross site scripting. The identification of this vulnerability is CVE-2024-2530. The attack may be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ AXIS 2100 2.43 admin/admin.shtml Cross Site Scripting


📈 22.51 Punkte
🕵️ Sicherheitslücken

🕵️ AXIS 2100 2.43 admin/admin.shtml cross site scripting


📈 22.51 Punkte
🕵️ Sicherheitslücken

🕵️ Microstrategy Web 7 admin/admin.asp ShowAll cross site scripting


📈 22.51 Punkte
🕵️ Sicherheitslücken

🕵️ [PRODSECBUG-2184] Stored cross-site scripting in the admin panel via the Terms & Conditions with Checkbox Text field in the admin panel


📈 22.51 Punkte
🕵️ Sicherheitslücken

🕵️ [PRODSECBUG-2178] Stored cross-site scripting in the admin panel via the Admin Shopping Cart Rules page


📈 22.51 Punkte
🕵️ Sicherheitslücken

⚠️ [webapps] Auto Dealership & Vehicle Showroom WebSys 1.0 - Persistent Cross-Site Scripting / Cross-Site Request Forgery / Admin panel Authentication bypass


📈 21.42 Punkte
⚠️ PoC

📰 'I'm Admin. You're Admin. Everyone is Admin.' Remote Access Bug Turns Western Digital My Cloud Into Everyone's Cloud


📈 20.39 Punkte
📰 IT Security Nachrichten

🕵️ Jiangnan Online Judge 0.8.0 web/admin/problem/create Problem[sample_input] cross site scripting


📈 19.84 Punkte
🕵️ Sicherheitslücken

🕵️ Jiangnan Online Judge 0.8.0 web/admin/problem/create Problem[description] cross site scripting


📈 19.84 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-6303 | CSZCMS 1.3.0 Site Settings Page /admin/settings/ Additional Meta Tag cross site scripting


📈 19.67 Punkte
🕵️ Sicherheitslücken

⚠️ [webapps] KYOCERA Net Admin 3.4 - Cross Site Request Forgery - Add Admin Exploit


📈 19.3 Punkte
⚠️ PoC

⚠️ #0daytoday #KYOCERA Net Admin 3.4 - Cross Site Request Forgery - Add Admin Exploit [#0day #Exploit]


📈 19.3 Punkte
⚠️ PoC

🕵️ Xiao5uCompany 1.7 admin/Admin.asp cross site request forgery


📈 19.3 Punkte
🕵️ Sicherheitslücken

🕵️ JEECMS 9.3 admin/ api/admin/role/save cross site request forgery


📈 19.3 Punkte
🕵️ Sicherheitslücken

⚠️ [webapps] RSVP Invitation Online 1.0 - Cross-Site Request Forgery (Update Admin)


📈 19.17 Punkte
⚠️ PoC

⚠️ #0daytoday #RSVP Invitation Online 1.0 - Cross-Site Request Forgery (Update Admin) Vulnerability [#0day #Exploit]


📈 19.17 Punkte
⚠️ PoC

⚠️ [webapps] SuperCom Online Shopping Ecommerce Cart 1 - Persistent Cross-Site scripting / Cross site request forgery / Authentication bypass


📈 18.75 Punkte
⚠️ PoC

⚠️ [webapps] Healwire Online Pharmacy 3.0 - Persistent Cross-Site Scripting / Cross-Site Request Forgery


📈 18.75 Punkte
⚠️ PoC

💾 Healwire Online Pharmacy 3.0 Cross Site Request Forgery / Cross Site Scripting


📈 18.75 Punkte
💾 IT Security Tools

⚠️ Healwire Online Pharmacy 3.0 Cross Site Request Forgery / Cross Site Scripting


📈 18.75 Punkte
⚠️ PoC

🕵️ Frog CMS 0.9.5 Admin Site Title Stored cross site scripting


📈 18.53 Punkte
🕵️ Sicherheitslücken

🕵️ LANGO Codeigniter Multilingual Script 1.0 Upload admin/settings/update site_name cross site scripting


📈 18.25 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2016-4159 | Adobe ColdFusion 11 Update 8/2016 Update 1/up to 10 Update 19 cross site scripting (Nessus ID 91677 / ID 370059)


📈 17.66 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-30003 | SourceCodester Online Market Place Site 1.0 Product Title/Short Description cross site scripting (ID 168250)


📈 17 Punkte
🕵️ Sicherheitslücken

🕵️ Bugtraq: [RCESEC-2016-004][CVE-2016-5005] Apache Archiva 1.3.9 admin/addProxyConnector_commit.action connector.sourceRepoId Persistent Cross-Site Scripting


📈 16.85 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: WordPress admin-font-editor Plugin CVE-2016-1000126 Cross Site Scripting Vulnerability


📈 16.85 Punkte
🕵️ Sicherheitslücken

🕵️ Bugtraq: [RCESEC-2016-004][CVE-2016-5005] Apache Archiva 1.3.9 admin/addProxyConnector_commit.action connector.sourceRepoId Persistent Cross-Site Scripting


📈 16.85 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: WordPress admin-font-editor Plugin CVE-2016-1000126 Cross Site Scripting Vulnerability


📈 16.85 Punkte
🕵️ Sicherheitslücken

🕵️ [ PRODSECBUG-2270 ] Reflected cross-site scripting in the admin panel - CVE-2019-7887


📈 16.85 Punkte
🕵️ Sicherheitslücken

🕵️ [PRODSECBUG-2290] Cross-site scripting through the Admin (XSS) - CVE-2019-8157


📈 16.85 Punkte
🕵️ Sicherheitslücken

🕵️ [PRODSECBUG-2128] Stored Cross Site Scripting in the Admin Panel through the tax/notification/info_url setting - CVE-2019-7853


📈 16.85 Punkte
🕵️ Sicherheitslücken

🕵️ z-song laravel-admin 1.7.3 cross site scripting [CVE-2019-17433]


📈 16.85 Punkte
🕵️ Sicherheitslücken

🕵️ Pi-hole Admin Portal cross site scripting [CVE-2021-29448]


📈 16.85 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-1220 | FoxyShop Plugin up to 4.8.1 on WordPress Admin Page cross site scripting


📈 16.85 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2173 | Advanced Database Cleaner Plugin up to 3.1.0 on WordPress Admin Dashboard cross site scripting


📈 16.85 Punkte
🕵️ Sicherheitslücken

matomo
•