675 matches found
CVE-2018-9237
iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site Description" field...
iScripts EasyCreate Cross-Site Scripting Vulnerability
IScripts EasyCreate is a set of online website builder from Iscripts, Inc. The tool can be used on the server for the client to provide website building services , belong to the fully customizable . A cross-site scripting vulnerability exists in the Site Description field in IScripts EasyCreate...
Open-AudIT Professional Cross-Site Scripting Vulnerability
Open-AudIT Professional is a network discovery and auditing program. The program intelligently scans networks and network devices and provides status reports. A cross-site scripting vulnerability exists in Open-AudIT Professional version 2.1. A remote attacker can exploit this vulnerability to...
CVE-2018-8903
Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen...
PT-2018-18704
Name of the Vulnerable Software and Affected Versions Open-AudIT Professional version 2.1 Description The issue allows for cross-site scripting XSS attacks via the Name or Description field on the Credentials screen. Recommendations For Open-AudIT Professional version 2.1, update to a version tha...
CVE-2018-8903: Improper Neutralization of Input During Web Page Generation
Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen...
ProjectSend cross-site scripting vulnerability (CNVD-2018-06778)
ProjectSend formerly known as cFTP is a suite of self-hosted applications based on PHP and MySQL. A cross-site scripting vulnerability exists in previous versions of ProjectSend commit 6c3710430be26feb5371cb0377e5355d6f9a27ca. A remote attacker can exploit this vulnerability to inject arbitrary w...
ProjectSend cross-site scripting vulnerability (CNVD-2018-04877)
ProjectSend formerly known as cFTP is a suite of self-hosted applications based on PHP and MySQL. A cross-site scripting vulnerability exists in ProjectSend commit. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the Description field...
Cross site scripting
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in a Site name updated...
CVE-2017-9783
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in a Site name updated...
CVE-2017-9783
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in a Site name updated...
CVE-2017-9786
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in My account Name updated, related to home.php and actions-log.php...
CVE-2017-9783
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in a Site name updated...
CVE-2017-9786
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in My account Name updated, related to home.php and actions-log.php...
CVE-2017-9783
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in a Site name updated...
CVE-2017-9786: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in My account Name updated, related to home.php and actions-log.php...
PT-2018-8534
Name of the Vulnerable Software and Affected Versions ProjectSend formerly cFTP versions before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the Description field in "My account Name...
PT-2018-8533
Name of the Vulnerable Software and Affected Versions ProjectSend versions prior to commit 6c3710430be26feb5371cb0377e5355d6f9a27ca Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the Description field in a Site name update. This cou...
CVE-2017-9783: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in a Site name updated...
CVE-2017-7419: Improper Neutralization of Input During Web Page Generation
A OAuth application in NetIQ Access Manager 4.3 before 4.3.2 and 4.2 before 4.2.4 allowed cross site scripting attacks due to unescaped "description" field that could be specified by the provider...