rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-22151 
Permissions vulnerability in Fuel-CMS v.1.4.6 allows a remote attacker to execute arbitrary code via a crafted zip file to the assests parameter of the upload function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-03T00:00:00.000Z
CVE-2020-22152 
Cross Site Scripting vulnerability in daylight studio FUEL- CMS v.1.4.6 allows a remote attacker to execute arbitrary code via the page title, meta description and meta keywords of the pages function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-03T00:00:00.000Z
CVE-2020-22153 
File Upload vulnerability in FUEL-CMS v.1.4.6 allows a remote attacker to execute arbitrary code via a crafted .php file to the upload parameter in the navigation function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-03T00:00:00.000Z
CVE-2020-22158 
MediaKind (formerly Ericsson) RX8200 5.13.3 devices are vulnerable to multiple reflected and stored XSS. An attacker has to inject JavaScript code directly in the "path" or "Services+ID" parameters and send the URL to a user in order to exploit reflected XSS. In the case of stored XSS, an attacker must modify the "name" parameter with the malicious code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T15:23:51.000Z
CVE-2020-22159 
EVERTZ devices 3080IPX exe-guest-v1.2-r26125, 7801FC 1.3 Build 27, and 7890IXG V494 are vulnerable to Arbitrary File Upload, allowing an authenticated attacker to upload a webshell or overwrite any critical system files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-18T00:00:00.000Z
CVE-2020-22164 
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\check_availability.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-22T14:15:28.000Z
CVE-2020-22165 
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-22T14:14:45.000Z
CVE-2020-22166 
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\forgot-password.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-22T14:13:55.000Z
CVE-2020-22167 
PHPGurukul Hospital Management System in PHP v4.0 has a Persistent Cross-Site Scripting vulnerability in \hms\admin\appointment-history.php. Remote registered users can exploit the vulnerability to obtain user cookie data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-22T14:13:02.000Z
CVE-2020-22168 
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\change-emaild.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-22T14:11:11.000Z
CVE-2020-22169 
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\appointment-history.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-22T14:10:20.000Z
CVE-2020-22170 
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\get_doctor.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-22T14:17:45.000Z
CVE-2020-22171 
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\registration.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-22T14:09:19.000Z
CVE-2020-22172 
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\get_doctor.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-22T14:08:27.000Z
CVE-2020-22173 
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\edit-profile.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-22T14:07:18.000Z
CVE-2020-22174 
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\book-appointment.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-22T14:06:15.000Z
CVE-2020-22175 
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\admin\betweendates-detailsreports.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-22T14:04:33.000Z
CVE-2020-22176 
PHPGurukul Hospital Management System in PHP v4.0 has a sensitive information disclosure vulnerability in multiple areas. Remote unauthenticated users can exploit the vulnerability to obtain user sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-22T14:19:48.000Z
CVE-2020-22181 
A reflected cross site scripting (XSS) vulnerability was discovered on Samsung sww-3400rw Router devices via the m2 parameter of the sess-bin/command.cgi
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-22198 
SQL Injection vulnerability in DedeCMS 5.7 via mdescription parameter to member/ajax_membergroup.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-16T15:21:27.000Z
CVE-2020-22199 
SQL Injection vulnerability in phpCMS 2007 SP6 build 0805 via the digg_mod parameter to digg_add.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-16T16:19:09.000Z
CVE-2020-22200 
Directory Traversal vulnerability in phpCMS 9.1.13 via the q parameter to public_get_suggest_keyword.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-16T16:30:28.000Z
CVE-2020-22201 
phpCMS 2008 sp4 allowas remote malicious users to execute arbitrary php commands via the pagesize parameter to yp/product.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-16T16:50:50.000Z
CVE-2020-22203 
SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-16T17:05:09.000Z
CVE-2020-22204 
SQL Injection in ECShop 2.7.6 via the goods_number parameter to flow.php. .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-16T17:13:03.000Z
CVE-2020-22205 
SQL Injection in ECShop 3.0 via the id parameter to admin/shophelp.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-16T17:18:27.000Z
CVE-2020-22206 
SQL Injection in ECShop 3.0 via the aid parameter to admin/affiliate_ck.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-16T17:22:36.000Z
CVE-2020-22208 
SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajax_street.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-16T17:42:16.000Z
CVE-2020-22209 
SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajax_common.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-16T17:48:05.000Z
CVE-2020-22210 
SQL Injection in 74cms 3.2.0 via the x parameter to ajax_officebuilding.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-16T17:51:49.000Z
CVE-2020-22211 
SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajax_street.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-16T17:56:37.000Z
CVE-2020-22212 
SQL Injection in 74cms 3.2.0 via the id parameter to wap/wap-company-show.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-16T17:59:47.000Z
CVE-2020-22217 
Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-22218 
An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-22219 
Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-22222 
Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the pjActionLoadCss function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-05T22:46:01.000Z
CVE-2020-22223 
Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoad function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-05T22:46:02.000Z
CVE-2020-22224 
Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the pjActionPreview function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-05T22:46:03.000Z
CVE-2020-22225 
Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoadForm function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-05T22:46:04.000Z
CVE-2020-22226 
Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionSetAmount function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-05T22:46:07.000Z
CVE-2020-22249 
Remote Code Execution vulnerability in phplist 3.5.1. The application does not check any file extensions stored in the plugin zip file, Uploading a malicious plugin which contains the php files with extensions like PHP,phtml,php7 will be copied to the plugins directory which would lead to the remote code execution
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-06T19:47:39.000Z
CVE-2020-22251 
Cross Site Scripting (XSS) vulnerability in phpList 3.5.3 via the login name field in Manage Administrators when adding a new admin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-06T19:20:03.000Z
CVE-2020-22253 
Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E_50H10L_S39 were all discovered to have port 9530 open which allows unauthenticated attackers to make arbitrary Telnet connections with the victim device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-06T22:41:18.000Z
CVE-2020-22273 
Neoflex Video Subscription System Version 2.0 is affected by CSRF which allows the Website's Settings to be changed (such as Payment Settings)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-04T17:03:44.000Z
CVE-2020-22274 
JomSocial (Joomla Social Network Extention) 4.7.6 allows CSV injection via a customer's profile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-04T17:06:20.000Z
CVE-2020-22275 
Easy Registration Forms (ER Forms) Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malicious CSV commands. After that, when the system administrator generates CSV output from the forms information, there is no check on this inputs and the codes are executable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-04T16:59:58.000Z
CVE-2020-22276 
WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-04T16:54:50.000Z
CVE-2020-22277 
Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-04T16:57:01.000Z
CVE-2020-22278 
phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-04T16:52:26.000Z
CVE-2020-22283 
A buffer overflow vulnerability in the icmp6_send_response_with_addrs_and_netif() function of Free Software Foundation lwIP version git head allows attackers to access sensitive information via a crafted ICMPv6 packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-22T00:00:00.000Z
CVE-2020-22284 
A buffer overflow vulnerability in the zepif_linkoutput() function of Free Software Foundation lwIP git head version and version 2.1.2 allows attackers to access sensitive information via a crafted 6LoWPAN packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-22T19:38:09.000Z
CVE-2020-22312 
A cross-site scripting (XSS) vulnerability was discovered in the OJ/admin-tool /cal_scores.php function of HZNUOJ v1.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-28T14:10:26.000Z
CVE-2020-22327 
An issue was discovered in HFish 0.5.1. When a payload is inserted where the name is entered, XSS code is triggered when the administrator views the information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-01-26T00:00:00.000Z
CVE-2020-22330 
Cross-Site Scripting (XSS) vulnerability in Subrion 4.2.1 via the title when adding a page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T13:26:45.000Z
CVE-2020-22334 
Cross Site Request Forgery (CSRF) vulnerability in beescms v4 allows attackers to delete the administrator account via crafted request to /admin/admin_admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-05-08T00:00:00.000Z
CVE-2020-22336 
An issue was discovered in pdfcrack 0.17 thru 0.18, allows attackers to execute arbitrary code via a stack overflow in the MD5 function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-06T00:00:00.000Z
CVE-2020-22345 
/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-18T20:21:28.000Z
CVE-2020-22352 
The gf_dash_segmenter_probe_input function in GPAC v0.8 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-04T20:02:36.000Z
CVE-2020-22390 
Akaunting <= 2.0.9 is vulnerable to CSV injection in the Item name field, export function. Attackers can inject arbitrary code into the name parameter and perform code execution when the crafted file is opened.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-21T14:02:56.000Z
CVE-2020-22392 
Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.2 when adding a blog and then editing an image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-05T21:04:50.000Z
CVE-2020-22394 
In YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting (XSS) vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-19T17:55:40.000Z
CVE-2020-22402 
Cross Site Scripting (XSS) vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-14T00:00:00.000Z
CVE-2020-22403 
Cross Site Request Forgery (CSRF) vulnerability in Express cart v1.1.16 allows attackers to add an administrator account, add discount code or other unspecified impacts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-12T00:00:00.000Z
CVE-2020-22421 
74CMS v6.0.4 was discovered to contain a cross-site scripting (XSS) vulnerability via /index.php?m=&c=help&a=help_list&key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-08T03:42:23.000Z
CVE-2020-22425 
Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remote command execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-15T17:39:15.000Z
CVE-2020-22427 
NagiosXI 5.6.11 is affected by a remote code execution (RCE) vulnerability. An authenticated nagiosadmin user can inject additional commands into a request. NOTE: the vendor disputes whether the CVE and its references are actionable because all technical details are omitted, and the only option is to pay for a subscription service where technical details may be disclosed at an unspecified later time
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-15T17:39:26.000Z
CVE-2020-22428 
SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an admin) containing a JavaScript payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-05T02:42:51.000Z
CVE-2020-22429 
redox-os v0.1.0 was discovered to contain a use-after-free bug via the gethostbyaddr() function at /src/header/netdb/mod.rs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-05-03T00:00:00.000Z
CVE-2020-22452 
SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to tbl_create.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-01-26T00:00:00.000Z
CVE-2020-22453 
Untis WebUntis before 2020.9.6 allows XSS in multiple functions that store information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-24T13:27:07.000Z
CVE-2020-22474 
In webERP 4.15, the ManualContents.php file allows users to specify the "Language" parameter, which can lead to local file inclusion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-22T16:07:14.000Z
CVE-2020-22475 
"Tasks" application version before 9.7.3 is affected by insecure permissions. The VoiceCommandActivity application component allows arbitrary applications on a device to add tasks with no restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-22T16:11:45.000Z
CVE-2020-22481 
An issue was discovered in HFish 0.5.1. When a payload is inserted where the password is entered, XSS code is triggered when the administrator views the information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-30T12:34:36.000Z
CVE-2020-22524 
Buffer Overflow vulnerability in FreeImage_Load function in FreeImage Library 3.19.0(r1828) allows attackers to cuase a denial of service via crafted PFM file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-22533 
Cross Site Scripting vulnerability found in Zentao allows a remote attacker to execute arbitrary code via the lang parameter
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z
CVE-2020-22535 
Incorrect Access Control vulnerability in PbootCMS 2.0.6 via the list parameter in the update function in upgradecontroller.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-09T15:57:48.000Z
CVE-2020-22539 
An arbitrary file upload vulnerability in the Add Category function of Codoforum v4.9 allows attackers to execute arbitrary code via uploading a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-15T00:00:00.000Z
CVE-2020-22540 
Stored Cross-Site Scripting (XSS) vulnerability in Codoforum v4.9, allows attackers to execute arbitrary code and obtain sensitive information via crafted payload to Category name component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-15T00:00:00.000Z
CVE-2020-22550 
Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-04T14:19:53.000Z
CVE-2020-22552 
The Snap7 server component in version 1.4.1, when an attacker sends a crafted packet with COTP protocol the last-data-unit flag set to No and S7 writes a var function, the Snap7 server will be crashed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-28T13:51:44.000Z
CVE-2020-22570 
Memcached 1.6.0 before 1.6.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted meta command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-22597 
An issue in Jerrscript- project Jerryscrip v. 2.3.0 allows a remote attacker to execute arbitrary code via the ecma_builtin_array_prototype_object_slice parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-03T00:00:00.000Z
CVE-2020-22607 
Cross Site Scripting vulnerabilty in LimeSurvey 4.1.11+200316 via the (1) name and (2) description parameters in application/controllers/admin/PermissiontemplatesController.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-28T18:22:18.000Z
CVE-2020-22608 
Cross Site Scripting vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter to include/ajax.search.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-28T18:30:09.000Z