CVE-2020-5586: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Cybozu Garoon 4.10.3 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vectors...

CVE-2020-5585: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vectors...

CVE-2020-5570

Cross-site scripting vulnerability in Sales Force Assistant version 11.2.48 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2020-5557

Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2020-5559

Cross-site scripting vulnerability in WL-Enq 1.11 and 1.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Security Bulletin: IBM Tivoli Netcool Impact is affected by an Arbitrary Script Injection vulnerability (CVE-2019-4681)

Summary IBM Tivoli Netcool Impact has addressed the following Arbitrary Script Injection vulnerability. Affected version of AngularJS shipped as a component of IBM Tivoli Netcool Impact. Vulnerability Details CVEID: CVE-2019-4681 DESCRIPTION: IBM Tivoli Netcool Impact is vulnerable to cross-site...

CVE-2020-10476

Reflected XSS in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort...

PT-2020-12136 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to inject arbitrary web script or HTML via the p parameter in the admin/edit-glossary.php file. This enables reflected XSS attacks. Recommendations: For...

CVE-2012-2517

Cross-site scripting XSS vulnerability in PrestaShop before 1.4.9 allows remote attackers to inject arbitrary web script or HTML via the index of the product parameter to ajax.php...

CVE-2020-5528

Cross-site scripting vulnerability in Movable Type series Movable Type 7 r.4603 and earlier Movable Type 7, Movable Type 6.5.2 and earlier Movable Type 6.5, Movable Type Advanced 7 r.4603 and earlier Movable Type Advanced 7, Movable Type Advanced 6.5.2 and earlier Movable Type Advanced 6.5, Movab...

CVE-2013-4241

Multiple cross-site scripting XSS vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 image, 3 url, or 4 testimonial parameter to the Testimonial form hms-testimonials-addnew page; 5 dateformat...

PT-2020-11189

Name of the Vulnerable Software and Affected Versions An-Analyzer versions prior to the version released after 2019 June 24 Description A DOM-based cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the Analysis Object Page. Recommendations For An-Analyz...

CVE-2019-9541

: Information Exposure vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5...

Cross site scripting

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ModalWindowPopup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling Syst...

CVE-2019-9540

CVE-2019-9540 affects Telos Automated Message Handling System (AMHS) with a cross-site scripting vulnerability in prefs.asp. The issue arises from improper input neutralization during web page generation, allowing a remote attacker to inject arbitrary script into an AMHS session. Affected version...

PT-2020-11361

Name of the Vulnerable Software and Affected Versions Telos Automated Message Handling System versions prior to 4.1.5.5 Description The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows a remote attacker to inject...

PT-2020-11359

Name of the Vulnerable Software and Affected Versions Telos Automated Message Handling System versions prior to 4.1.5.5 Description The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows a remote attacker to inject...

CVE-2019-9541: Exposure of Sensitive Information to an Unauthorized Actor

: Information Exposure vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5...

CVE-2019-9542: Improper Neutralization of Input During Web Page Generation

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System...

CVE-2019-9539: Improper Neutralization of Input During Web Page Generation

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ModalWindowPopup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling Syst...