Skip to content
OpenAdvisories

Vendor

guardian

22 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 4.6

    Guardian Language-System XSS via id Parameter in media.php

    Guardian language-system fails to sanitize the id GET parameter before inserting it into HTML source and form action attributes in media.php (lines 119, 129). An authenticated attacker can craft a URL that injects script tags executing in the victim's browser…

  • Medium 4.6

    Guardian Language-System XSS via id Parameter in text_file.php

    Guardian language-system fails to sanitize the id GET parameter before inserting it into multiple HTML form action attributes in text_file.php (lines 94, 101, 323, 403, 826, 852). An authenticated attacker can craft a URL that injects script tags executing in…

  • Medium 4.6

    Guardian Language-System XSS via name Parameter in designer.php

    Guardian language-system fails to sanitize the name GET parameter before outputting it into an HTML input value attribute in designer.php (line 57). An authenticated attacker can craft a URL containing script tags that execute in the victim's browser session.