Skip to content
OpenAdvisories

Archive

22 July 2023

Vulnerabilities first published on this day (UTC), newest first.

11 results · Clear filters · Feed

  • Low 2.4

    DedeBIZ sys_sql_query.php cross site scripting

    A vulnerability classified as problematic has been found in DedeBIZ 6.2.10. Affected is an unknown function of the file /admin/sys_sql_query.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has bee…

  • Low 3.5

    Bug Finder MineStack Ticket create cross site scripting

    A vulnerability classified as problematic has been found in Bug Finder MineStack 1.0. This affects an unknown part of the file /user/ticket/create of the component Ticket Handler. The manipulation of the argument message leads to cross site scripting. It is p…

  • Low 3.5

    Bug Finder EX-RATE Ticket create cross site scripting

    A vulnerability was found in Bug Finder EX-RATE 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /user/ticket/create of the component Ticket Handler. The manipulation of the argument message leads to cros…

  • Low 3.5

    Bug Finder Montage Ticket create cross site scripting

    A vulnerability was found in Bug Finder Montage 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /user/ticket/create of the component Ticket Handler. The manipulation of the argument message lead…

  • Low 3.5

    Bug Finder Wedding Wonders Ticket create cross site scripting

    A vulnerability was found in Bug Finder Wedding Wonders 1.0. It has been classified as problematic. Affected is an unknown function of the file /user/ticket/create of the component Ticket Handler. The manipulation of the argument message leads to cross site s…

  • Low 3.5

    Bug Finder Finounce Ticket create cross site scripting

    A vulnerability was found in Bug Finder Finounce 1.0 and classified as problematic. This issue affects some unknown processing of the file /user/ticket/create of the component Ticket Handler. The manipulation of the argument message leads to cross site script…

  • Low 3.5

    Bug Finder SASS BILLER store cross site scripting

    A vulnerability was found in Bug Finder SASS BILLER 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /company/store. The manipulation of the argument name leads to cross site scripting. The attack may be initiated …

  • Low 3.5

    Bug Finder ICOGenie Support Ticket create cross site scripting

    A vulnerability was found in Bug Finder ICOGenie 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /user/ticket/create of the component Support Ticket Handler. The manipulation of the argument message leads to cross…

  • Low 3.5

    Bug Finder Listplace Directory Listing Platform Photo coverPhotoUpdate cross site scripting

    A vulnerability was found in Bug Finder Listplace Directory Listing Platform 3.0. It has been classified as problematic. This affects an unknown part of the file /listplace/user/coverPhotoUpdate of the component Photo Handler. The manipulation of the argument…

  • Low 3.5

    Bug Finder Listplace Directory Listing Platform HTTP POST Request create cross site scripting

    A vulnerability was found in Bug Finder Listplace Directory Listing Platform 3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /listplace/user/ticket/create of the component HTTP POST Request Handler. The mani…

  • Low 2.6

    Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP

    In PHP versions 8.0.* before 8.0.29, 8.1.* before 8.1.20, 8.2.* before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for failure, and was using narrower range of values than it should have. In case of random generato…