7973 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in /scp/index.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "sort" parameter...
CVE-2018-7193
Cross-site scripting XSS vulnerability in /scp/directory.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "order" parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in /scp/directory.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "order" parameter...
CVE-2018-7193
Cross-site scripting XSS vulnerability in /scp/directory.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "order" parameter...
PT-2018-8411
Name of the Vulnerable Software and Affected Versions QNAP QTS versions 4.2.6 build 20171026 and earlier, QTS 4.3.3 build 20170727 and earlier Description A cross-site scripting XSS issue exists in the File Station of QNAP QTS, allowing remote attackers to inject arbitrary web script or HTML. Thi...
CVE-2018-6882
Cross-site scripting XSS vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Suite ZCS before 8.7 Patch 1 and 8.8.x before 8.8.7 might allow remote attackers to inject arbitrary web script or HTML via a Content-Location header in an email attachment. Recent...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in IBM InfoSphere Master Data Management MDM - Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 107771...
CVE-2015-7423: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in IBM InfoSphere Master Data Management MDM - Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 107771...
Cross site scripting
Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting vulnerability in PHP 2chBBS version bbs18c allows an attacker to inject arbitrary web script or HTML via unspecified vectors...
CVE-2018-0535
Cross-site scripting vulnerability in PHP 2chBBS version bbs18c allows an attacker to inject arbitrary web script or HTML via unspecified vectors...
PT-2018-8894
Name of the Vulnerable Software and Affected Versions PHP 2chBBS version bbs18c Description A cross-site scripting issue allows an attacker to inject arbitrary web script or HTML. Recommendations For PHP 2chBBS version bbs18c, update to a version that fixes this issue, as no specific workaround i...
PT-2018-8893
Name of the Vulnerable Software and Affected Versions ArsenoL version 0.5 Description A cross-site scripting issue allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Recommendations For ArsenoL version 0.5, at the moment, there is no information about a newer versi...
PT-2018-8897
Name of the Vulnerable Software and Affected Versions QQQ SYSTEMS version 2.24 Description A cross-site scripting issue allows an attacker to inject arbitrary web script or HTML. Recommendations For QQQ SYSTEMS version 2.24, at the moment, there is no information about a newer version that contai...
PT-2018-8895
Name of the Vulnerable Software and Affected Versions QQQ SYSTEMS version 2.24 Description A cross-site scripting issue allows an attacker to inject arbitrary web script or HTML via the quiz.cgi endpoint. Recommendations For QQQ SYSTEMS version 2.24, consider restricting access to the quiz.cgi...
CVE-2018-1229
Pivotal Spring Batch Admin, all versions, contains a stored XSS vulnerability in the file upload feature. An unauthenticated malicious user with network access to Spring Batch Admin could store an arbitrary web script that would be executed by other users. This issue has not been patched because...
Cross site scripting
Cross-site scripting XSS vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file...
Cross site scripting
Cross-site scripting XSS vulnerability in the gallery function in Alkacon OpenCMS 10.5.3 allows remote attackers to inject arbitrary web script or HTML via a malicious SVG image...
PT-2018-4419
Name of the Vulnerable Software and Affected Versions IBM Connections versions 3.0.1.1 and earlier IBM Connections version 4.0 IBM Connections version 4.5 IBM Connections versions 5.0 before CR4 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or...