Skip to content
OpenAdvisories

Archive

20 July 2023

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Low 3.9

    EasyAdmin8 File Upload Module index.html unrestricted upload

    A vulnerability was found in EasyAdmin8 2.0.2.2. It has been classified as problematic. Affected is an unknown function of the file /admin/index/index.html#/admin/mall.goods/index.html of the component File Upload Module. The manipulation leads to unrestricte…

  • Low 3.5

    Bug Finder ChainCity Real Estate Investment Platform New Ticket create cross site scripting

    A vulnerability classified as problematic has been found in Bug Finder ChainCity Real Estate Investment Platform 1.0. Affected is an unknown function of the file /chaincity/user/ticket/create of the component New Ticket Handler. The manipulation of the argume…

  • Low 3.5

    Boom CMS assets-manager add cross site scripting

    A vulnerability has been found in Boom CMS 8.0.7 and classified as problematic. Affected by this vulnerability is the function add of the component assets-manager. The manipulation of the argument title/description leads to cross site scripting. The attack ca…

  • Low 3.5

    PaulPrinting CMS Search delivery cross site scripting

    A vulnerability, which was classified as problematic, was found in PaulPrinting CMS 2018. Affected is an unknown function of the file /account/delivery of the component Search. The manipulation of the argument s leads to cross site scripting. It is possible t…

  • Low 3.5

    ActiveITzone Active Super Shop CMS Manage Details Page cross site scripting

    A vulnerability, which was classified as problematic, has been found in ActiveITzone Active Super Shop CMS 2.5. This issue affects some unknown processing of the component Manage Details Page. The manipulation of the argument name/phone/address leads to cross…

  • Low 3.5

    Codecanyon Tiva Events Calender cross site scripting

    A vulnerability classified as problematic was found in Codecanyon Tiva Events Calender 1.4. This vulnerability affects unknown code. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has bee…

  • Low 3.5

    PaulPrinting CMS cross site scripting

    A vulnerability was found in PaulPrinting CMS 2018. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument firstname/lastname/address/city/state leads to cross site scripting. The attack may be…

  • Low 3.5

    Dooblou WiFi File Explorer cross site scripting

    A vulnerability was found in Dooblou WiFi File Explorer 1.13.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument search/order/download/mode leads to cross site scripting. The att…

  • Low 3.5

    Webile HTTP POST Request cross site scripting

    A vulnerability was found in Webile 1.0.1. It has been classified as problematic. Affected is an unknown function of the component HTTP POST Request Handler. The manipulation of the argument new_file_name/c leads to cross site scripting. It is possible to lau…