Skip to content
OpenAdvisories

Archive

21 July 2024

Vulnerabilities first published on this day (UTC), newest first.

10 results · Clear filters · Feed

  • Low 3.5

    SourceCodester Record Management System sort2.php cross site scripting

    A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file sort2.php. The manipulation of the argument qualification leads to cross site scripting. It is possibl…

  • Low 3.5

    SourceCodester Record Management System sort1.php cross site scripting

    A vulnerability was found in SourceCodester Record Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file sort1.php. The manipulation of the argument position leads to cross site scri…

  • Low 3.5

    ThinkSAAS Admin Panel Security Center anti.php cross site scripting

    A vulnerability, which was classified as problematic, was found in ThinkSAAS 3.7.0. Affected is an unknown function of the file app/system/action/anti.php of the component Admin Panel Security Center. The manipulation of the argument ip/email/phone leads to c…

  • Low 3.5

    ThinkSAAS do.php cross site scripting

    A vulnerability, which was classified as problematic, has been found in ThinkSAAS 3.7.0. This issue affects some unknown processing of the file app/system/action/do.php. The manipulation of the argument site_title/site_subtitle/site_key/site_desc/site_url/sit…

  • Low 3.5

    Xinhu RockOA tpl_upload.html okla cross site scripting

    A vulnerability was found in Xinhu RockOA 2.6.3 and classified as problematic. Affected by this issue is the function okla of the file /webmain/public/upload/tpl_upload.html. The manipulation of the argument callback leads to cross site scripting. The attack …

  • Low 3.5

    SiYuan PDF PDF.js cross site scripting

    A vulnerability has been found in SiYuan 3.1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file PDF.js of the component PDF Handler. The manipulation leads to cross site scripting. The attack can be launche…

  • Low 2.7

    formtools.org Form Tools Import Option List edit.php curl_exec file inclusion

    A vulnerability, which was classified as problematic, was found in formtools.org Form Tools 3.1.1. Affected is the function curl_exec of the file /admin/forms/option_lists/edit.php of the component Import Option List. The manipulation of the argument url lead…

  • Low 2.7

    formtools.org Form Tools Setting code injection

    A vulnerability, which was classified as problematic, has been found in formtools.org Form Tools 3.1.1. This issue affects some unknown processing of the file /admin/settings/index.php?page=accounts of the component Setting Handler. The manipulation of the ar…

  • Low 2.4

    formtools.org Form Tools User Settings Page cross site scripting

    A vulnerability classified as problematic was found in formtools.org Form Tools 3.1.1. This vulnerability affects unknown code of the file /admin/clients/ of the component User Settings Page. The manipulation leads to cross site scripting. The attack can be i…

  • Low 2.4

    formtools.org Form Tools cross site scripting

    A vulnerability classified as problematic has been found in formtools.org Form Tools 3.1.1. This affects an unknown part of the file /admin/forms/add/step2.php?submission_type=direct. The manipulation of the argument Form URL leads to cross site scripting. It…