EUVD-2014-5086

Malware in sbrugna...

Lyris ListManager 'EmailAddr' Parameter Cross Site Scripting Vulnerability

Lyris ListManager is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-5188

Cross-site scripting XSS vulnerability in doemailpassword.tml in Lyris ListManager LM 8.95a allows remote attackers to inject arbitrary web script or HTML via the EmailAddr parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in doemailpassword.tml in Lyris ListManager LM 8.95a allows remote attackers to inject arbitrary web script or HTML via the EmailAddr parameter...

CVE-2014-5188

Cross-site scripting XSS vulnerability in doemailpassword.tml in Lyris ListManager LM 8.95a allows remote attackers to inject arbitrary web script or HTML via the EmailAddr parameter...

CVE-2014-5188: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in doemailpassword.tml in Lyris ListManager LM 8.95a allows remote attackers to inject arbitrary web script or HTML via the EmailAddr parameter...

PT-2014-6327

Name of the Vulnerable Software and Affected Versions Lyris ListManager LM version 8.95a Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the EmailAddr parameter in the doemailpassword.tml file. This could potentially lead t...

ZendTo "emailAddr" 脚本插入漏洞

CVECAN ID: CVE-2013-6808 ZendTo是基于Web的文件转换器。 ZendTo 4.11-12版本没有正确过滤pickup.php的 "emailAddr" 参数值，可导致插入任意HTML和脚本代码，被查看后，在受影响站点的用户浏览器上下文中执行这些代码。 0 ZendTo ZendTo = 4.11-12 厂商补丁： ZendTo ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.zend.to/changelog.phpZendTo ZendTo = 4.11-12...

ZendTo 'emailAddr' 脚本插入漏洞

CVECAN ID: CVE-2013-6808 ZendTo是基于Web的文件转换器。 ZendTo 4.11-12版本没有正确过滤pickup.php的 "emailAddr" 参数值，可导致插入任意HTML和脚本代码，被查看后，在受影响站点的用户浏览器上下文中执行这些代码。 0 ZendTo ZendTo = 4.11-12 厂商补丁： ZendTo ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.zend.to/changelog.phpZendTo ZendTo = 4.11-12...

PT-2013-6120

Name of the Vulnerable Software and Affected Versions ZendTo versions prior to 4.11-13 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved by modifying the emailAddr field in the pickup.php endpoint. Recommendatio...

CVE-2013-6808: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in lib/NSSDropoff.php in ZendTo before 4.11-13 allows remote attackers to inject arbitrary web script or HTML via a modified emailAddr field to pickup.php...