Advisories · Weakness
CWE-707.
Every Advisory and CVE whose sources give the weakness CWE-707, newest first.
- CVSS 3.5 Low
Opencaching Deutschland oc-server3 Cachelist cachelists.tpl cross site scripting
- Opencaching Deutschland oc-server3
- CWE-707
- CVSS 3.5 Low
Opencaching Deutschland oc-server3 Cookie start.tpl cross site scripting
- Opencaching Deutschland oc-server3
- CWE-707
- CVSS 3.5 Low
starter-public-edition-4 cross site scripting
- starter-public-edition-4
- CWE-707
- CVSS 3.5 Low
1j01 mind-map app.coffee cross site scripting
- 1j01 mind-map
- CWE-707
- CVSS 6.3 Medium
roxlukas LMeve Login Page sql injection
- roxlukas LMeve
- CWE-707
- CVSS 5.5 Medium
y_project RuoYi GenController sql injection
- y_project RuoYi
- CWE-707
- CVSS 3.5 Low
SemanticDrilldown Extension GET Parameter SDBrowseDataPage.php printFilterLine cross site scripting
- SemanticDrilldown Extension
- CWE-707
- CVSS 3.5 Low
INEX IPX-Manager list.foil.php cross site scripting
- INEX IPX-Manager
- CWE-707
- CVSS 3.5 Low
Alinto SOGo Folder/Mail NSString+Utilities.m cross site scripting
- Alinto SOGo
- CWE-707
- CVSS 3.5 Low
Alinto SOGo Identity SOGoUserDefaults.m _migrateMailIdentities cross site scripting
- Alinto SOGo
- CWE-707
- CVSS 3.5 Low
WSO2 carbon-registry Cross-site Scripting vulnerability
- Cross-site scripting (XSS)
- CWE-707
<4.8.12 · fixed in 4.8.12
GHSA-j34r-57xj-pfm5 · CVE-2022-4520 - CVSS 3.5 Low
A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photo_det...
- CWE-707
<3.16 · fixed in 3.16
GHSA-287q-jfcp-9vhv · CVE-2022-4526 - CVSS 3.5 Low
vexim2 cross site scripting
- vexim2
- CWE-707
- CVSS 3.5 Low
CalendarXP cross site scripting
- CalendarXP
- CWE-707
- CVSS 3.5 Low
Opencaching Deutschland oc-server3 varset.inc.php cross site scripting
- Opencaching Deutschland oc-server3
- CWE-707
- CVSS 3.5 Low
European Environment Agency eionet.contreg cross site scripting
- European Environment Agency eionet.contreg
- CWE-707
- CVSS 3.5 Low
falling-fruit cross site scripting
- falling-fruit
- CWE-707
- CVSS 5.5 Medium
m0ver bible-online Search search.java query sql injection
- m0ver bible-online
- CWE-707
- CVSS 3.5 Low
ipti br.tag cross site scripting
- ipti br.tag
- CWE-707
- CVSS 2.6 Low
yikes-inc-easy-mailchimp-extender Cross-site Scripting vulnerability
- Cross-site scripting (XSS)
- CWE-707
<6.8.6 · fixed in 6.8.6
GHSA-837v-6vgx-jqcc · CVE-2021-4244 - CVSS 3.5 Low
rAthena FluxCP Service Desk Image URL view.php cross site scripting
- rAthena FluxCP
- CWE-707
- CVSS 6.3 Medium
RainyGao DocSys getReposAllUsers.do getReposAllUsers sql injection
- RainyGao DocSys
- CWE-707
- CVSS 6.3 Medium
SourceCodester Canteen Management System ajax_represent.php sql injection
- SourceCodester Canteen Management System
- CWE-707
- CVSS 3.5 Low
pallidlight online-course-selection-system cross site scripting
- pallidlight online-course-selection-system
- CWE-707
- CVSS 3.5 Low
zbl1996 FS-Blog Title cross site scripting
- zbl1996 FS-Blog
- CWE-707
- CVSS 3.5 Low
pyRdfa3 Cross-site Scripting vulnerability
- Cross-site scripting (XSS)
- CWE-707
<3.6.2 · fixed in 3.6.2
GHSA-894q-wpg5-mf2h · CVE-2022-4396 - CVSS 5.5 Medium
TicklishHoneyBee nodau db.c sql injection
- TicklishHoneyBee nodau
- CWE-707
- CVSS 6.3 Medium
Mingsoft MCMS vulnerable to SQL Injection
- SQL injection
- CWE-707
<5.2.10 · fixed in 5.2.10
GHSA-hc5g-xf64-j49j · CVE-2022-4375 - CVSS 3.5 Low
S-CMS Contact Information Page cross site scripting
- S-CMS
- CWE-707
- CVSS 3.5 Low
Mingsoft MCMS vulnerable to Cross-site Scripting
- Cross-site scripting (XSS)
- CWE-707
<=5.2.8 · no fixed version yet
GHSA-p46c-m4j7-mjvq · CVE-2022-4350 - CVSS 3.5 Low
RuoYi-Cloud Cross-site Scripting vulnerability
- Cross-site scripting (XSS)
- CWE-707
<=4.6.2 · no fixed version yet
GHSA-vp22-232w-h9x8 · CVE-2022-4348 - CVSS 4.3 Medium
LinZhaoguan pb-cms Message Board comment cross site scripting
- LinZhaoguan pb-cms
- CWE-707
- CVSS 3.5 Low
LinZhaoguan pb-cms IpUtil.getIpAddr cross site scripting
- LinZhaoguan pb-cms
- CWE-707
- CVSS 3.5 Low
xiandafu beetl-bbs WebUtils.java cross site scripting
- xiandafu beetl-bbs
- CWE-707
- CVSS 2.4 Low
annyshow DuxCMS Article edit cross site scripting
- annyshow DuxCMS
- CWE-707
- CVSS 3.5 Low
csliuwy coder-chain_gdut cross site scripting
- csliuwy coder-chain_gdut
- CWE-707
- CVSS 6.3 Medium
maku-boot Scheduled Task AbstractScheduleJob.java doExecute injection
- maku-boot
- CWE-707
- CVSS 6.3 Medium
FastCMS Template edit injection
- FastCMS
- CWE-707
- CVSS 4.7 Medium
SpringBootCMS Template Management injection
- SpringBootCMS
- CWE-707
- CVSS 3.5 Low
SourceCodester Human Resource Management System employeeview.php cross site scripting
- SourceCodester Human Resource Management System
- CWE-707
- CVSS 4.7 Medium
SourceCodester Human Resource Management System employeeadd.php sql injection
- SourceCodester Human Resource Management System
- CWE-707
- CVSS 6.3 Medium
Shaoxing Background Management System Bd sql injection
- Shaoxing Background Management System
- CWE-707
- CVSS 6.3 Medium
House Rental System POST Request search-property.php sql injection
- House Rental System
- CWE-707
- CVSS 6.3 Medium
House Rental System view-property.php sql injection
- House Rental System
- CWE-707
- CVSS 6.3 Medium
C-DATA Web Management System GET Parameter jumpto.php argument injection
- C-DATA Web Management System
- CWE-707
- CVSS 3.5 Low
SourceCodester Canteen Management System customer.php builtin_echo cross site scripting
- SourceCodester Canteen Management System
- CWE-707
- CVSS 3.5 Low
SourceCodester Canteen Management System categories.php builtin_echo cross site scripting
- SourceCodester Canteen Management System
- CWE-707
- CVSS 2.4 Low
Movie Ticket Booking System editBooking.php cross site scripting
- Movie Ticket Booking System
- CWE-707
- CVSS 3.5 Low
Movie Ticket Booking System booking.php cross site scripting
- Movie Ticket Booking System
- CWE-707
- CVSS 3.5 Low
Movie Ticket Booking System POST Request cross site scripting
- Movie Ticket Booking System
- CWE-707
- CVSS 5.0 Medium
Movie Ticket Booking System editBooking.php sql injection
- Movie Ticket Booking System
- CWE-707
- CVSS 6.3 Medium
Movie Ticket Booking System booking.php sql injection
- Movie Ticket Booking System
- CWE-707
- CVSS 3.5 Low
SourceCodester Canteen Management System brand.php builtin_echo cross site scripting
- SourceCodester Canteen Management System
- CWE-707
- CVSS 2.4 Low
SourceCodester Event Registration System cross site scripting
- SourceCodester Event Registration System
- CWE-707
- CVSS 5.0 Medium
SourceCodester Canteen Management System POST Request ajax_invoice.php query sql injection
- SourceCodester Canteen Management System
- CWE-707
- CVSS 6.3 Medium
Sapido BR270n/BRC76n/GR297/RB1732 syscmd.htm os command injection
- Sapido BR270n
- Sapido BRC76n
- CWE-707
- CVSS 3.5 Low
SourceCodester Canteen Management System food.php query cross site scripting
- SourceCodester Canteen Management System
- CWE-707
- CVSS 4.3 Medium
rickxy Stock Management System processlogin.php cross site scripting
- rickxy Stock Management System
- CWE-707
- CVSS 7.3 High
rickxy Stock Management System processlogin.php sql injection
- rickxy Stock Management System
- CWE-707
- CVSS 6.3 Medium
Unsanitized input leading to code injection in Dalli
- Other injection
- CWE-707
<3.2.3 · fixed in 3.2.3
GHSA-3xg8-cc8f-9wv2 · CVE-2022-4064