The vulnerability allows an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. This can lead to the theft of cookie-based authentication credentials and the ability to launch further attacks.
Jetbox is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
GaliX is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
HLstats is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may help an attacker steal cookie-based authentication credentials and launch other attacks.
This exploit allows an attacker to bypass authentication and gain privilege escalation on D-Link routers. The vulnerability is caused by a SQL injection vulnerability. By exploiting this vulnerability, an attacker can gain a non-persistent root shell on the affected router.
The Sonicwall GMS v7.x is vulnerable to a filter bypass and persistent vulnerability. An attacker can exploit this vulnerability to bypass filters and gain persistent access to the system. This can lead to unauthorized access, data loss, and other malicious activities. The vulnerability has a Common Vulnerability Scoring System (CVSS) score of 4.1.
ClientExec is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
The Apache Tomcat's documentation web application includes a sample application that is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
The PsychoStats application is prone to a path-disclosure issue when invalid data is submitted. This vulnerability allows an attacker to access sensitive data that can be used to launch further attacks against a vulnerable computer.
Redoable is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Services By CQR