CVE-2014-9505

CVE-2014-9505 is a Cross-Site Scripting (XSS) vulnerability in the Drupal School Administration module (7.x-1.x) before 7.x-1.8. The issue arises because node titles are not properly sanitized, allowing remote authenticated users with permission to create or edit a class node to inject arbitrary ...

CVE-2014-9505

Cross-site scripting XSS vulnerability in the School Administration module 7.x-1.x before 7.x-1.8 for Drupal allows remote authenticated users with permission to create or edit a class node to inject arbitrary web script or HTML via a node title...

CVE-2014-8072

The administration module in OpenMRS 2.1 Standalone Edition allows remote authenticated users to obtain read access via a direct request to /admin...

Design/Logic Flaw

The administration module in OpenMRS 2.1 Standalone Edition allows remote authenticated users to obtain read access via a direct request to /admin...

CVE-2014-8072

CVE-2014-8072 affects OpenMRS 2.1 Standalone Edition, where the administration module allows remote authenticated users to obtain read access through a direct request to /admin. The available sources confirm the vulnerability details but do not provide exploit steps, affected product variants bey...

CVE-2014-8072

The administration module in OpenMRS 2.1 Standalone Edition allows remote authenticated users to obtain read access via a direct request to /admin...

FortiMail Messaging Security Appliance crossite scripting

Crossite scripting in web administration module...

CVE-2006-4727

Cross-site scripting XSS vulnerability in emfadmin/statusView.do in Tumbleweed EMF Administration Module 6.2.2 Build 4123, and possibly other versions before 6.3.2, allows remote attackers to inject arbitrary web script or HTML via the 1 lineId and 2 sort parameters...

CVE-2006-4727

CVE-2006-4727 describes an XSS vulnerability in Tumbleweed EMF Administration Module 6.2.2 Build 4123, and possibly earlier versions before 6.3.2. The flaw allows remote attackers to inject arbitrary web script or HTML via the lineId and sort parameters in emfadmin/statusView.do. Impact is that a...

CVE-2006-4727

Cross-site scripting XSS vulnerability in emfadmin/statusView.do in Tumbleweed EMF Administration Module 6.2.2 Build 4123, and possibly other versions before 6.3.2, allows remote attackers to inject arbitrary web script or HTML via the 1 lineId and 2 sort parameters...

WORK System E-Commerce 3.0.1 - Remote File Inclusion

WORK System E-Commerce 3.0.1 - Remote File Inclusion ============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability...

nexusway.txt

Product : Neteyes Nexusway http://www.neteyes.com.tw Description: Neteyes Nexusway multiple vulnerability Severity: Very High Description =========== The NexusWay is a Multiservice Border Gateway that provides the Multiaccess and Multiservice capabilities in the border segment of an enterprise...

Oracle 9i Application Server 9.0.2 Web Cache Administration Tool - Denial of Service

source: https://www.securityfocus.com/bid/5902/info Oracle 9i Application Server 9iAS allows remote administration via a web access module. This vulnerability affects Oracle 9iAS running on Microsoft Windows. When a custom request is sent to the Web Administration module, the module may react...