CVE-2017-7388

A Cross-Site Scripting XSS was discovered in 'wallacepos v1.4.1'. The vulnerability exists due to insufficient filtration of user-supplied data token passed to the 'wallacepos-master/myaccount/resetpassword.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the...

Cross site scripting

Multiple Cross-Site Scripting XSS were discovered in Gazelle before 2017-03-19. The vulnerabilities exist due to insufficient filtration of user-supplied data torrents, size passed to the 'Gazelle-master/sections/tools/managers/multiplefreeleech.php' URL. An attacker could execute arbitrary HTML...

CVE-2017-7250

A Cross-Site Scripting XSS was discovered in Gazelle before 2017-03-19. The vulnerability exists due to insufficient filtration of user-supplied data action passed to the 'Gazelle-master/sections/tools/finances/bitcoinbalance.php' URL. An attacker could execute arbitrary HTML and script code in a...

PT-2017-17609

Name of the Vulnerable Software and Affected Versions Gazelle versions prior to 2017-03-19 Description A Cross-Site Scripting issue was discovered due to insufficient filtration of user-supplied data passed to the "Gazelle-master/sections/better/transcode.php" URL. This allows an attacker to...

CVE-2017-7247: Improper Neutralization of Input During Web Page Generation

Multiple Cross-Site Scripting XSS were discovered in Gazelle before 2017-03-19. The vulnerabilities exist due to insufficient filtration of user-supplied data torrents, size passed to the 'Gazelle-master/sections/tools/managers/multiplefreeleech.php' URL. An attacker could execute arbitrary HTML...

CVE-2017-7251: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS was discovered in pi-engine/pi 2.5.0. The vulnerability exists due to insufficient filtration of user-supplied data preview passed to the "pi-develop/www/script/editor/markitup/preview/markdown.php" URL. An attacker could execute arbitrary HTML and script code in a...

PT-2017-17608

Name of the Vulnerable Software and Affected Versions Gazelle versions prior to 2017-03-19 Description The issue is related to insufficient filtration of user-supplied data, such as torrents and size, which are passed to the "Gazelle-master/sections/tools/managers/multiple freeleech.php" URL. Thi...

Cross site scripting

A cross-site scripting XSS vulnerability in MantisBT before 2.1.1 allows remote attackers to inject arbitrary HTML or JavaScript if MantisBT's CSP settings permit it by modifying 'windowtitle' in the application configuration. This requires privileged access to MantisBT configuration management...

CVE-2017-7222

A cross-site scripting XSS vulnerability in MantisBT before 2.1.1 allows remote attackers to inject arbitrary HTML or JavaScript if MantisBT's CSP settings permit it by modifying 'windowtitle' in the application configuration. This requires privileged access to MantisBT configuration management...

CVE-2017-7205

A Cross-Site Scripting XSS was discovered in GamePanelX-V3 3.0.12. The vulnerability exists due to insufficient filtration of user-supplied data a passed to the "GamePanelX-V3-master/ajax/ajax.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the...

CVE-2017-7204

A Cross-Site Scripting XSS was discovered in imdbphp 5.1.1. The vulnerability exists due to insufficient filtration of user-supplied data name passed to the "imdbphp-master/demo/search.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

CVE-2017-7203

A Cross-Site Scripting XSS was discovered in ZoneMinder before 1.30.2. The vulnerability exists due to insufficient filtration of user-supplied data postLoginQuery passed to the "ZoneMinder-master/web/skins/classic/views/js/postlogin.js.php" URL. An attacker could execute arbitrary HTML and scrip...

CVE-2017-7205: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS was discovered in GamePanelX-V3 3.0.12. The vulnerability exists due to insufficient filtration of user-supplied data a passed to the "GamePanelX-V3-master/ajax/ajax.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the...

CVE-2017-7202: Improper Neutralization of Input During Web Page Generation

Multiple Cross-Site Scripting XSS were discovered in SLiMS 7 Cendana before 2017-03-16. The vulnerabilities exist due to insufficient filtration of user-supplied data id passed to the 'slims7cendana-master/template/default/detailtemplate.php' and...

PT-2017-17572

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.30.2 Description A Cross-Site Scripting XSS issue was discovered due to insufficient filtration of user-supplied data, specifically the postLoginQuery variable, passed to the...

CVE-2017-6958

An XSS vulnerability in the MantisBT Source Integration Plugin before 2.0.2 search result page allows an attacker to inject arbitrary HTML or JavaScript if MantisBT's CSP settings permit it by crafting any valid parameter...

CVE-2017-6958: Improper Neutralization of Input During Web Page Generation

An XSS vulnerability in the MantisBT Source Integration Plugin before 2.0.2 search result page allows an attacker to inject arbitrary HTML or JavaScript if MantisBT's CSP settings permit it by crafting any valid parameter...

Authorization

An issue was discovered in Open.GL before 2017-03-13. The vulnerability exists due to insufficient filtration of user-supplied data content passed to the "Open.GL-master/index.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...

CVE-2017-6907: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Open.GL before 2017-03-13. The vulnerability exists due to insufficient filtration of user-supplied data content passed to the "Open.GL-master/index.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...

PT-2017-17406

Name of the Vulnerable Software and Affected Versions SiberianCMS versions prior to 4.10.0 Description The issue is caused by insufficient filtration of user-supplied data passed to the "SiberianCMS-master/errors/500.php" URL, allowing an attacker to execute arbitrary HTML and script code in a...