Cross site scripting

Cross-site scripting XSS vulnerability in models/issue.go in Gogs aka Go Git Service 0.3.1-9 through 0.5.x before 0.5.8 allows remote attackers to inject arbitrary web script or HTML via the text parameter to api/v1/markdown...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ZTE ZXDSL 831 allow remote attackers to inject arbitrary web script or HTML via the 1 tr69cAcsURL, 2 tr69cAcsUser, 3 tr69cAcsPwd, 4 tr69cConnReqPwd, or 5 tr69cDebugEnable parameter to the TR-069 client page tr69cfg.cgi; the 6 timezone parameter...

CVE-2014-7290

Multiple cross-site scripting XSS vulnerabilities in Atlas Systems Aeon 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the 1 Action or 2 Form parameter to aeon.dll...

PT-2014-7884

Name of the Vulnerable Software and Affected Versions Aeon versions 3.5 through 3.6 Description The issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the Action or Form parameter to the "aeon.dll" endpoint. Recommendations For versions 3.5 and 3.6, conside...

PT-2014-7041

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager versions prior to 6.0.0.3 IF14 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. This can lead to the execution of malicious scripts on...

CVE-2014-8954

Multiple cross-site scripting XSS vulnerabilities in phpSound 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the 1 Title or 2 Description fields in a playlist or the 3 filter parameter in an explore action to index.php...

CVE-2014-8732

Cross-site scripting XSS vulnerability in phpMemcachedAdmin 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-7248

Cross-site scripting XSS vulnerability in IPA iLogScanner 4.0 allows remote attackers to inject arbitrary web script or HTML by triggering a crafted entry in a log file...

CVE-2014-8557

Multiple cross-site scripting XSS vulnerabilities in JExperts Channel Platform 5.0.33CCB allow remote attackers to inject arbitrary web script or HTML via the 1 usuario.nome variable in an editarUsuario action to usuario.do or 2 titulo.form variable in a novoChamado action to ticket.do...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in JExperts Channel Platform 5.0.33CCB allow remote attackers to inject arbitrary web script or HTML via the 1 usuario.nome variable in an editarUsuario action to usuario.do or 2 titulo.form variable in a novoChamado action to ticket.do...

CVE-2014-8557

Multiple cross-site scripting XSS vulnerabilities in JExperts Channel Platform 5.0.33CCB allow remote attackers to inject arbitrary web script or HTML via the 1 usuario.nome variable in an editarUsuario action to usuario.do or 2 titulo.form variable in a novoChamado action to ticket.do...

PT-2014-8617

Name of the Vulnerable Software and Affected Versions JExperts Channel Platform version 5.0.33 CCB Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the usuario.nome variable in an 'editarUsuario' action to 'usuario.do' or the titulo.fo...

CVE-2014-4116

CVE-2014-4116 is an XSS/elevation-of-privilege issue in Microsoft SharePoint Foundation 2010 SP2. The vulnerability arises from improper handling of list content, allowing remote authenticated users to inject arbitrary script/HTML via a modified list (SharePoint Elevation of Privilege Vulnerabili...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Tivoli Netcool/Impact 6.1.1 before 6.1.1.1-TIV-NCI-IF0001 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Cross site request forgery (csrf)

Cross-site scripting XSS vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-site request forgery CSRF attack to crea...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in console interface scripts in Symantec Endpoint Protection Manager SEPM 12.1 before RU5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6620: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-7304

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions prior to 6.3.6 Aruba Networks ClearPass versions 6.4.x prior to 6.4.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-5451

Cross-site scripting XSS vulnerability in manager/templates/default/header.tpl in MODX Revolution 2.3.1-pl and earlier allows remote attackers to inject arbitrary web script or HTML via the "a" parameter to manager/. NOTE: this issue exists because of a CVE-2014-2080 regression...

CVE-2014-8658

Cross-site scripting XSS vulnerability in RefinedWiki Original Theme 3.x before 3.5.13 and 4.x before 4.0.12 for Confluence allows remote authenticated users with permissions to create or edit content to inject arbitrary web script or HTML via the versionComment parameter to pages/doeditpage.acti...