7974 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in CMS Made Simple allow remote authenticated users to inject arbitrary web script or HTML via 1 the group parameter to admin/addgroup.php, 2 the htmlblob parameter to admin/addhtmlblob.php, the 3 title or 4 url parameter to admin/addbookmark.php,...
Cross site scripting
Cross-site scripting XSS vulnerability in lib/filemanager/ImageManager/editorFrame.php in CMS Made Simple 1.11.10 allows remote attackers to inject arbitrary web script or HTML via the action parameter, a different issue than CVE-2014-0334. NOTE: the original disclosure also reported issues that...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Business Voice Services Manager BVSM page in Cisco Unified Communications Domain Manager 9.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCum78536, CSCum78526, CSCum69809, and...
CVE-2014-2080
Cross-site scripting XSS vulnerability in manager/templates/default/header.tpl in ModX Revolution before 2.2.11 allows remote attackers to inject arbitrary web script or HTML via the "a" parameter...
CVE-2014-1456
Cross-site scripting XSS vulnerability in the login page in Open Web Analytics OWA before 1.5.6 allows remote attackers to inject arbitrary web script or HTML via the owauserid parameter to index.php...
CVE-2014-2080
Cross-site scripting XSS vulnerability in manager/templates/default/header.tpl in ModX Revolution before 2.2.11 allows remote attackers to inject arbitrary web script or HTML via the "a" parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Content Navigator 2.x before 2.0.2.2-ICN-FP002 allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter...
CVE-2014-1223
Cross-site scripting XSS vulnerability in controlpanel/loading.aspx in Telligent Evolution before 6.1.19.36103, 7.x before 7.1.12.36162, 7.5.x, and 7.6.x before 7.6.7.36651 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these details are obtain...
CVE-2014-0046
Cross-site scripting XSS vulnerability in the link-to helper in Ember.js 1.2.x before 1.2.2, 1.3.x before 1.3.2, and 1.4.x before 1.4.0-beta.6, when used in non-block form, allows remote attackers to inject arbitrary web script or HTML via the title attribute...
CVE-2014-1968
Cross-site scripting XSS vulnerability in the XooNIps module 3.47 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2014-4391
Name of the Vulnerable Software and Affected Versions XOOPS XooNIps module versions 3.47 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This could potentially lead to unauthorized actions on behalf o...
CVE-2011-4580
Multiple cross-site scripting XSS vulnerabilities in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-4580: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-0840
Multiple cross-site scripting XSS vulnerabilities in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-6047
Multiple cross-site scripting XSS vulnerabilities in the site creation interface in ikiwiki-hosting before 0.20131025 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the site creation interface in ikiwiki-hosting before 0.20131025 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2014-3886
Name of the Vulnerable Software and Affected Versions IBM Rational Focal Point versions 6.4.x through 6.5.x before 6.5.2.3 IBM Rational Focal Point versions 6.6.x before 6.6.1 Description The issue allows remote authenticated users to inject arbitrary web script or HTML by uploading a file, which...
CVE-2013-6732
Cross-site scripting XSS vulnerability in the server in IBM Cognos Business Intelligence BI 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter...
PT-2014-3899
Name of the Vulnerable Software and Affected Versions IBM Cognos Business Intelligence BI versions 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 Description A cross-site scripting XSS issue exists due to improper handling of an unspecified...
PT-2014-3857
Name of the Vulnerable Software and Affected Versions Blackboard Vista/CE versions 8.0 SP6 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For Blackboard Vista/CE versions 8.0 SP6 and...