Xiebruce

Picuploader

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2024-44794

Exploit
  • EPSS 0.17%
  • Published 26.08.2024 20:15:08
  • Last modified 05.09.2024 18:28:09

A cross-site scripting (XSS) vulnerability in the component /master/auth/OnedriveRedirect.php of PicUploader commit fcf82ea allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error_description parameter.

6.1

CVE-2024-44796

Exploit
  • EPSS 0.19%
  • Published 26.08.2024 20:15:08
  • Last modified 06.09.2024 23:35:04

A cross-site scripting (XSS) vulnerability in the component /auth/AzureRedirect.php of PicUploader commit fcf82ea allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error_description parameter.