Skip to content
OpenAdvisories

Archive

21 June 2022

Vulnerabilities first published on this day (UTC), newest first.

63 results · Feed

  • Unscored —

    maccms10 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Server Group text field.

  • Unscored —

    maccms8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Server Group text field.

  • Unscored —

    Recipes - Stored XSS in Name Parameter

    In Recipes, versions 0.17.0 through 1.2.5 are vulnerable to Stored Cross-Site Scripting (XSS), in the ‘Name’ field of Keyword, Food and Unit components. When a victim accesses the Keyword/Food/Unit endpoints, the XSS payload will trigger. A low privileged att…

  • Unscored —

    Recipes - Stored XSS in Clipboard

    In Recipes, versions 1.0.5 through 1.2.5 are vulnerable to Stored Cross-Site Scripting (XSS), in copy to clipboard functionality. When a victim accesses the food list page, then adds a new Food with a malicious javascript payload in the ‘Name’ parameter and c…

  • Unscored —

    Recipes - Stored XSS in Add to Cart

    In Recipes, versions 1.0.5 through 1.2.5 are vulnerable to Stored Cross-Site Scripting (XSS), in “Add to Cart” functionality. When a victim accesses the food list page, then adds a new Food with a malicious javascript payload in the ‘Name’ parameter and click…

  • Critical 9.8

    Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool

    An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.

  • Critical 9.8

    Insufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers

    An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.

  • Medium 6.3

    Hindu Matrimonial Script reports.php privileges management

    A vulnerability, which was classified as critical, was found in Hindu Matrimonial Script. This affects an unknown part of the file /admin/reports.php. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The…

  • Medium 6.3

    Hindu Matrimonial Script googleads.php privileges management

    A vulnerability, which was classified as critical, has been found in Hindu Matrimonial Script. Affected by this issue is some unknown functionality of the file /admin/googleads.php. The manipulation leads to improper privilege management. The attack may be la…

  • Medium 6.3

    Hindu Matrimonial Script photo.php privileges management

    A vulnerability classified as critical was found in Hindu Matrimonial Script. Affected by this vulnerability is an unknown functionality of the file /admin/photo.php. The manipulation leads to improper privilege management. The attack can be launched remotely…

  • Medium 6.3

    Hindu Matrimonial Script featured.php privileges management

    A vulnerability classified as critical has been found in Hindu Matrimonial Script. Affected is an unknown function of the file /admin/featured.php. The manipulation leads to improper privilege management. It is possible to launch the attack remotely. The expl…

  • Medium 6.3

    Hindu Matrimonial Script success_story.php privileges management

    A vulnerability was found in Hindu Matrimonial Script. It has been rated as critical. This issue affects some unknown processing of the file /admin/success_story.php. The manipulation leads to improper privilege management. The attack may be initiated remotel…

  • Medium 6.3

    Hindu Matrimonial Script searchview.php privileges management

    A vulnerability was found in Hindu Matrimonial Script. It has been declared as critical. This vulnerability affects unknown code of the file /admin/searchview.php. The manipulation leads to improper privilege management. The attack can be initiated remotely. …

  • Medium 6.3

    Hindu Matrimonial Script payment.php privileges management

    A vulnerability was found in Hindu Matrimonial Script. It has been classified as critical. This affects an unknown part of the file /admin/payment.php. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. Th…

  • Medium 6.3

    Hindu Matrimonial Script newsletter1.php privileges management

    A vulnerability was found in Hindu Matrimonial Script and classified as critical. Affected by this issue is some unknown functionality of the file /admin/newsletter1.php. The manipulation leads to improper privilege management. The attack may be launched remo…

  • Medium 6.3

    Hindu Matrimonial Script cms.php privileges management

    A vulnerability has been found in Hindu Matrimonial Script and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/cms.php. The manipulation leads to improper privilege management. The attack can be launched r…

  • Medium 6.3

    Hindu Matrimonial Script generalsettings.php privileges management

    A vulnerability, which was classified as critical, was found in Hindu Matrimonial Script. Affected is an unknown function of the file /admin/generalsettings.php. The manipulation leads to improper privilege management. It is possible to launch the attack remo…

  • Medium 6.3

    Hindu Matrimonial Script renewaldue.php privileges management

    A vulnerability, which was classified as critical, has been found in Hindu Matrimonial Script. This issue affects some unknown processing of the file /admin/renewaldue.php. The manipulation leads to improper privilege management. The attack may be initiated r…

  • Medium 6.3

    Hindu Matrimonial Script communitymanagement.php privileges management

    A vulnerability classified as critical was found in Hindu Matrimonial Script. This vulnerability affects unknown code of the file /admin/communitymanagement.php. The manipulation leads to improper privilege management. The attack can be initiated remotely. Th…

  • Medium 6.3

    Hindu Matrimonial Script countrymanagement.php privileges management

    A vulnerability classified as critical has been found in Hindu Matrimonial Script. This affects an unknown part of the file /admin/countrymanagement.php. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. …

  • Medium 6.3

    Hindu Matrimonial Script usermanagement.php privileges management

    A vulnerability was found in Hindu Matrimonial Script. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/usermanagement.php. The manipulation leads to improper privilege management. The attack may be launch…

  • High 7.3

    Hindu Matrimonial Script sql injection

    A vulnerability was found in Hindu Matrimonial Script. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/. The manipulation of the argument username/password with the input 'or''=' leads to sql inj…

  • Unscored —

    A vulnerability has been identified in Cerberus DMS (All versions), Desigo CC (All versions), Desigo CC Compact (All ve…