# xss

CVE-2021-32160: GitHub - Mesh3l911/CVE-2021-32160: Exploiting a Reflected Cross-Site Scripting (XSS) attack to create a privileged user through the Webmin's add users feature then getting a reverse shell through the

A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the Add Users feature.

3 years ago

CVE-2021-32157: GitHub - Mesh3l911/CVE-2021-32157: Exploiting a Reflected Cross-Site Scripting (XSS) attack to get a Remote Command Execution (RCE) through the Webmin's Scheduled Cron Jobs feature

A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature.

3 years ago

CVE-2021-32158: GitHub - Mesh3l911/CVE-2021-32158: Exploiting a Reflected Cross-Site Scripting (XSS) attack to get a Command Injection through the Webmin's Upload and Download feature

A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Upload and Download feature.

3 years ago

CVE-2022-27280: IoT_Hunter/Inhand InRouter 900 Industrial 4G Router Vulnerabilities(XSS).pdf at main · skyvast404/IoT_Hunter

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the web_exec parameter at /apply.cgi.

3 years ago

CVE-2022-27280: IoT_Hunter/Inhand InRouter 900 Industrial 4G Router Vulnerabilities(XSS).pdf at main · wu610777031/IoT_Hunter

#xss #vulnerability #web #git #pdf

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the web_exec parameter at /apply.cgi.

3 years ago

CVE-2022-27961: There is a stored xss vulnerability exists in ofcms · Issue #I4Z8QU · 欧福/ofcms - Gitee.com

#xss #vulnerability #web #git

A cross-site scripting (XSS) vulnerability at /ofcms/company-c-47 in OFCMS v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comment text box.

3 years ago

CVE-2022-27958: CVE-Request/febs.md at main · afeng2016-s/CVE-Request

#xss #vulnerability #web #windows #apple #js #git #java

Insecure permissions configured in the userid parameter at /user/getuserprofile of FEBS-Security v1.0 allows attackers to access and arbitrarily modify users' personal information.

3 years ago

CVE-2022-27477: There is a File upload vulnerability exists in newbee-mall · Issue #63 · newbee-ltd/newbee-mall

#xss #vulnerability #web #windows #apple #google #js #git #java

Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit.

3 years ago