CWE-79

CVE-2022-3721

February 23, 2023 by godfreyd94

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.39.

CVE-2022-37238

February 23, 2023 by godfreyd94

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the currentRequest parameter.

CVE-2022-37239

February 23, 2023 by godfreyd94

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the rulles_list_ajax endpoint.

CVE-2022-37241

February 23, 2023 by godfreyd94

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the data_leak_list_ajax endpoint.

CVE-2022-37243

February 23, 2023 by godfreyd94

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whitelist endpoint.

CVE-2022-37244

February 23, 2023 by godfreyd94

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter. after login leads to inject malicious tag leads to IFRAME injection.