|
209821
|
7.5 |
HIGH
Network
|
dropouts
|
super_backup
|
Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain an issue in the path parameter of the `list` and `download` module which allows attackers to perform a directory traversal via …
|
CWE-22
Path Traversal
|
CVE-2020-23061
|
2024-11-21 14:13 |
2021-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209822
|
7.1 |
HIGH
Local
|
tonec
|
internet_download_manager
|
Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Export/Import function. This vulnerability allows attackers to escalate local process privileges via a cra…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-23060
|
2024-11-21 14:13 |
2021-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209823
|
4.6 |
MEDIUM
Physics
|
file_explorer_project
|
file_explorer
|
An issue in the authentication mechanism in Nong Ge File Explorer v1.4 unauthenticated allows to access sensitive data.
|
CWE-287
Improper Authentication
|
CVE-2020-23058
|
2024-11-21 14:13 |
2021-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209824
|
5.4 |
MEDIUM
Network
|
lancom-systems
|
lcos
|
ANCOM WLAN Controller (Wireless Series & Hotspot) WLC-1000 & WLC-4006 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the /authen/start/ module via the userid and pas…
|
CWE-79
Cross-site Scripting
|
CVE-2020-23055
|
2024-11-21 14:13 |
2021-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209825
|
6.1 |
MEDIUM
Network
|
user-agent_switcher_and_manager_project
|
user-agent_switcher_and_manager
|
A cross-site scripting (XSS) vulnerability in NSK User Agent String Switcher Service v0.3.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the user agent input fie…
|
CWE-79
Cross-site Scripting
|
CVE-2020-23054
|
2024-11-21 14:13 |
2021-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209826
|
5.4 |
MEDIUM
Network
|
catalyst
|
mahara
|
Catalyst IT Ltd Mahara CMS v19.10.2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component groupfiles.php via the Number (Nombre) and Description (Descripción)…
|
CWE-79
Cross-site Scripting
|
CVE-2020-23052
|
2024-11-21 14:13 |
2021-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209827
|
6.1 |
MEDIUM
Network
|
user_registration_\&_login_and_user_management_system_with_admin_panel_project
|
user_registration_\&_login_and_user_management_system_with_admin_panel
|
Phpgurukul User Registration & User Management System v2.0 was discovered to contain multiple stored cross-site scripting (XSS) vulnerabilities via the firstname and lastname parameters of the regist…
|
CWE-79
Cross-site Scripting
|
CVE-2020-23051
|
2024-11-21 14:13 |
2021-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209828
|
8.0 |
HIGH
Network
|
taotesting
|
tao_assessment_platform
|
TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a HTML injection vulnerability in the userFirstName parameter of the user account input field. This vulnerability allows atta…
|
CWE-74
Injection
|
CVE-2020-23050
|
2024-11-21 14:13 |
2021-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209829
|
5.4 |
MEDIUM
Network
|
fork-cms
|
fork_cms
|
Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the `Displayname` field when using the `Add`, `Edit` or `Register' functions. This vu…
|
CWE-79
Cross-site Scripting
|
CVE-2020-23049
|
2024-11-21 14:13 |
2021-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209830
|
6.1 |
MEDIUM
Network
|
seeddms
|
seeddms
|
SeedDMS Content Management System v6.0.7 contains a persistent cross-site scripting (XSS) vulnerability in the component AddEvent.php via the name and comment parameters.
|
CWE-79
Cross-site Scripting
|
CVE-2020-23048
|
2024-11-21 14:13 |
2021-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|