CVE-2019-20183

uploadimage.php in Employee Records System 1.0 allows upload and execution of arbitrary PHP code because file-extension validation is only on the client side. The attacker can modify global.js to allow the .php extension...

WordPress awesome-support cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. awesome-support is a helpdesk and ticketing system plugin used in it. A cross-site scripting vulnerability exists in WordPress...

PrestaShop cross-site scripting vulnerability (CNVD-2020-02542)

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in PrestaShop version 1.7.6.2. The...

Dairy Farm Shop Management System Cross-Site Scripting Vulnerability

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . A cross-site scripting vulnerability exists in Dairy Farm Shop Management System version 1.0. The vulnerability stems from a lack of proper validation of client-side data in the web application. An attacker...

WordPress Video Comments Webcam Recorder Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Video Comments Webcam Recorder is a video capture plugin used in... A cross-site scripting vulnerability exists in the...

WordPress Podcast Channels Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Podcast Channels is a plugin for building podcast sites. A cross-site scripting vulnerability exists in WordPress Podcast Channels 0.20...

CVE-2019-16327

D-Link DIR-601 B1 2.00NA devices are vulnerable to authentication bypass. They do not check for authentication at the server side and rely on client-side validation, which is bypassable. NOTE: this is an end-of-life product...

SAP Business Objects Business Intelligence Platform Cross-Site Scripting Vulnerability (CNVD-2019-46442)

SAP Business Objects Business Intelligence Platform is a suite of bookstore intelligence software and enterprise performance solutions from Germany's SAP. The product features report generation, analytics and data visualization. A cross-site scripting vulnerability exists in SAP BusinessObjects...

Red Hat JBoss BRMS Cross-Site Scripting Vulnerability

Red Hat JBoss BRMS is a suite of platforms for the development of containerized microservices and applications to automate business decisions from Red Hat, USA. A cross-site scripting vulnerability exists in Red Hat JBoss BRMS versions prior to 5.1.0, which stems from a lack of proper validation ...

WordPress NextGEN Gallery Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.NextGEN Gallery is an image gallery plugin used in it. A cross-site scripting vulnerability exists in WordPress NextGEN Gallery. The...

Activity for Drupal Cross-Site Scripting Vulnerability

Drupal is an open source content management system developed by the Drupal community using the PHP language.Activity is one of the Activity modules. A cross-site scripting vulnerability exists in Activity for Drupal version 6.x-1.x. The vulnerability stems from the WEB application lacking proper...

matomo cross-site scripting vulnerability (CNVD-2019-42232)

matomo is an open source web analytics application based on PHP and MySQL. A cross-site scripting vulnerability exists in matomo versions prior to 1.10.1. The vulnerability stems from the WEB application failing to properly validate client-side data. An attacker can exploit the vulnerability to...

SAP Enable Now Cross-Site Scripting Vulnerability

SAP Enable Now is a collaborative content creation, management and sharing platform from SAP. The platform is mainly used for online learning and training in SAP and non-SAP systems. A cross-site scripting vulnerability exists in SAP Enable Now. The vulnerability stems from a lack of proper...

Smartweares HOME easy Authentication Bypass Vulnerability

Smartweares HOME easy is prone to an authentication bypass vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

TYPO3 cross-site scripting vulnerability (CNVD-2019-41241)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in the backend of TYPO3. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can...

Red Hat JBoss AeroGear Cross-Site Scripting Vulnerability

Red Hat JBoss AeroGear is an open source library for mobile service connectivity from Red Hat USA. The product provides features such as data synchronization, identity management and push notifications. A cross-site scripting vulnerability exists in Red Hat JBoss AeroGear, which stems from the la...

Smartwares HOME Easy 1.0.9 Authentication Bypass

Smartwares HOME easy v1.0.9 Client-Side Authentication Bypass Vendor: Smartwares Product web page: https://www.smartwares.eu Affected version: =1.0.9 Summary: Home Easy/Smartwares are a range of products designed to remotely control your home using wireless technology. Home Easy/Smartwares is ver...

TYPO3 cross-site scripting vulnerability (CNVD-2019-40299)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in Extension Manager in TYPO3. The vulnerability stems from the lack of proper validation of client-side data in the WEB application, which can b...

Online Store System Cross-Site Scripting Vulnerability

Online Store System is an e-commerce system. A cross-site scripting vulnerability exists in Online Store System v1.0. The vulnerability stems from a lack of proper validation of client-side data in the web application. An attacker can exploit this vulnerability to execute client-side code...

XunRuiCMS Cross-Site Scripting Vulnerability

XunRuiCloud Software Development XunRuiCMS XunRuiCMS is an open source content management system CMS from China XunRuiCloud Software Development Company. A cross-site scripting vulnerability exists in XunRuiCMS version 4.3.1. The vulnerability stems from the lack of proper validation of client-si...