CVE-2018-13256

PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter...

PT-2018-11721

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Auditor Website version 2.0.1 Description The issue allows for XSS via the lastname or firstname parameter. Recommendations For PHP Scripts Mall Auditor Website version 2.0.1, update the software to a version that fixes this...

CVE-2018-13256: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter...

vance.ustaxdata.com XSS vulnerability

Open Bug Bounty ID: OBB-608846 Description| Value ---|--- Affected Website:| vance.ustaxdata.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-9838

Dolibarr ERP/CRM is affected by multiple reflected Cross-Site Scripting XSS vulnerabilities in versions before 5.0.4: index.php leftmenu parameter, core/ajax/box.php PATHINFO, product/stats/card.php type parameter, holiday/list.php monthcreate, monthstart, and monthend parameters, and don/card.ph...

ncagr.gov XSS vulnerability

Vulnerable URL: http://www.ncagr.gov/aspzine/employeedirectory/dirsearch.asp?firstname=Justin=query%22%3E%3Cscript/src=%22http://xssposed.org/1.js%3Elol%3C/script%3E\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability...

CVE-2017-15374

Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend modules. Remote attackers are able to inject malicious script code into the firstname, lastname, or order input fields to provoke persistent execution in the...

CVE-2017-15374: Improper Neutralization of Input During Web Page Generation

Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend modules. Remote attackers are able to inject malicious script code into the firstname, lastname, or order input fields to provoke persistent execution in the...

Zoll ePCR 2.6.4 Script Insertion

Document Title: =============== Zoll ePCR v2.6.4 iOS - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1882 Release Date: ============= 2016-08-01 Vulnerability Laboratory ID VL-ID: ====================================...

Liferay Stored XSS Vulnerability

Liferay is prone to a stored cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-3670

Cross-site scripting XSS vulnerability in users.jsp in the Profile Search functionality in Liferay before 7.0.0 CE RC1 allows remote attackers to inject arbitrary web script or HTML via the FirstName field...

Cross site scripting

Cross-site scripting XSS vulnerability in users.jsp in the Profile Search functionality in Liferay before 7.0.0 CE RC1 allows remote attackers to inject arbitrary web script or HTML via the FirstName field...

CVE-2016-3670

Cross-site scripting XSS vulnerability in users.jsp in the Profile Search functionality in Liferay before 7.0.0 CE RC1 allows remote attackers to inject arbitrary web script or HTML via the FirstName field...

CVE-2016-3670: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in users.jsp in the Profile Search functionality in Liferay before 7.0.0 CE RC1 allows remote attackers to inject arbitrary web script or HTML via the FirstName field...

PT-2016-5647

Name of the Vulnerable Software and Affected Versions Liferay versions prior to 7.0.0 CE RC1 Description A cross-site scripting XSS issue exists in the Profile Search functionality, specifically in the users.jsp file. This allows remote attackers to inject arbitrary web script or HTML via the...

Bugcrowd Bug Bounty #7 - Persistent Web Vulnerability

Document Title: =============== Bugcrowd Bug Bounty 7 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1830 ID: b40f63ed19074014df808599e44684f6a18bb6f4f51cf21948ef78df2f56c13b Release Date: ============= 2016-05-10...

CVE-2016-1912

Multiple cross-site scripting XSS vulnerabilities in Dolibarr ERP/CRM 3.8.3 allow remote authenticated users to inject arbitrary web script or HTML via the 1 lastname, 2 firstname, 3 email, 4 job, or 5 signature parameter to htdocs/user/card.php...

PT-2016-4918

Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM version 3.8.3 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via specific parameters to the "htdocs/user/card.php" endpoint, including the lastname, firstname, email, job, or...

BlinkSale Bug Bounty #1 - Encode & Validation Vulnerability

Document Title: =============== BlinkSale Bug Bounty 1 - Encode & Validation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1416 Release Date: ============= 2015-02-06 Vulnerability Laboratory ID VL-ID: ====================================...

PT-2014-4985

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 6.1.2 CE GA3, 6.1.X EE, and 6.2.X EE Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific...