Django CMS 'Groups' HTML Injection Vulnerability

Django CMS is Django Software Foundation of a set of open source based on the Django framework for content management systems . Django CMS suffers from an HTML injection vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be...

Multiple Vulnerabilities in ZOHO ManageEngine EventLog Analyzer

ZOHO ManageEngine EventLog Analyzer is the United States ZhuoHao ZOHO company's set of system, event log analysis software. HTML injection vulnerabilities and cross-site scripting vulnerabilities exist in ZOHO ManageEngine EventLog Analyzer version 11.0 Build 11000. These vulnerabilities can be...

Thomson TWG850 has multiple vulnerabilities

The Thomson TWG850 is a router product from Thomson Reuters USA. The Thomson TWG850 suffers from HTML injection, authentication bypass, and cross-site request forgery vulnerabilities. An attacker could use these vulnerabilities to steal cookie-based authentication, execute arbitrary code in an...

WordPress WP Advanced Comment Plugin HTML Injection Vulnerability

WordPress is a suite of blogging platforms developed in the PHP language by the WordPress Software Foundation.WP Advanced Comment is one of the Ajax-based comment plugins. An HTML injection vulnerability exists in the WordPress WP Advanced Comment plugin. An attacker can exploit this vulnerabilit...

Wordpress ProjectTheme has multiple vulnerabilities

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language.ProjectTheme is one of the plugins used to create project themes. Wordpress ProjectTheme has HTML injection, cross-site scripting, cross-site request forgery, and information disclosure...

Multiple Vulnerabilities in ZOHO ManageEngine Password Manager Pro

ZOHO ManageEngine Password Manager Pro PMP is a set of U.S. ZOHO ZOHO password management software. ZOHO ManageEngine PMP suffers from HTML injection, user enumeration, cross-site request forgery, power lifting, security bypass, and authentication bypass vulnerabilities. An attacker can exploit...

Multiple vulnerabilities in concrete5 (CNVD-2016-05229)

concrete5 is a free content management system CMS developed by Portland Labs in the United States. concrete5 5.7.3.1 and earlier versions contain 1. cross-site request forgery vulnerability 2. HTML injection vulnerability 3. local file inclusion vulnerability, a remote attacker can use these...

WordPress Jetpack Plugin HTML Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language.Jetpack is one of the plugin packages that includes a variety of features such as social sharing, social login and social commenting. An HTML injection vulnerability exists in WordPress...

Joomla! SecurityCheck and SecurityCheck Pro Extension HTML Injection Vulnerability

Joomla! is a U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features . SecurityCheck and SecurityCheck Pro are among the network security extension components. An HTML injection vulnerability exists ...

Multiple Vulnerabilities in ZOHO ManageEngine OpManager

ZOHO ManageEngine OpManager is a set of network, server and virtualization monitoring software from ZOHO. The software provides monitoring configuration, alarms and notifications, monitoring reports and other functions. HTML injection vulnerabilities, cross-site scripting vulnerabilities,...

WordPress All in One SEO Pack Plugin HTML Injection Vulnerability

WordPress is a set of blogging platform developed in PHP language by WordPress Software Foundation.All in One SEO Pack is one of the SEO optimized plugins. An HTML injection vulnerability exists in the WordPress All in One SEO Pack plugin version 2.3.6.1, which can be exploited by an attacker to...

WordPress Live Chat Support Plugin HTML Injection Vulnerability

WordPress is a blogging platform developed in PHP by the WordPress Software Foundation.Live Chat Support is one of the chat plugins. An HTML injection vulnerability exists in versions of the WordPress Live Chat Support plugin prior to 6.2.02, which can be exploited by an attacker to run arbitrary...

Log pollution can potentially lead to local HTML injection - ownCloud

The "download log" functionality in the admin screen is delivering the log in JSON format to the end-user. The file was delivered with an attachment disposition forcing the browser to download the document. However, Firefox running on Microsoft Windows would offer the user to open the data in the...

Server: Log pollution can potentially lead to local HTML injection

The "download log" functionality in the admin screen is delivering the log in JSON format to the end-user. The file was delivered with an attachment disposition forcing the browser to download the document. However, Firefox running on Microsoft Windows would offer the user to open the data in the...

HTML Injection Vulnerability in Multiple Pivotal Products

Pivotal Cloud Foundry is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software that provides container scheduling, continuous delivery, and automated service deployment.Pivotal Elastic Runtime is one of Pivotal Cloud Foundry's runtime environments. UAA User...

WordPress CSV Importer Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language.CSV Importer is one of the plug-ins for importing CSV or XML files. A cross-site scripting vulnerability exists in version 1.0 of the WordPress CSV Importer plugin, which can be exploited by...

Red Hat oVirt Engine Cross-Site Scripting Vulnerability

Red Hat oVirt Engine is an open source virtualization management platform from Red Hat Red Hat, an open source version of RHEV Platform for Enterprise Virtualization, consisting of the oVirt-node client and the overt-engine management side . A cross-site scripting vulnerability exists in Red Hat...

Red Hat Spacewalk Monitoring Cross-Site Scripting Vulnerability

Red Hat Spacewalk is an open source Linux system management solution from Red Hat, and Spacewalk Monitoring is one of the configuration tools. A cross-site scripting vulnerability exists in Red Hat Spacewalk Monitoring, which can be exploited by an attacker to inject arbitrary web script or HTML...

Pivotal Software Ops Manager HTML Injection Vulnerability

Pivotal Software PCF Ops Manager is a set of consoles for installing, upgrading and changing PCFs from Pivotal Software, USA. An HTML injection vulnerability exists in Pivotal Software Ops Manager version 1.6.x prior to 1.6.17. An attacker can exploit this vulnerability to execute arbitrary scrip...

Pivotal Cloud Foundry Elastic Runtime HTML Injection Vulnerability

Pivotal Cloud Foundry is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software that provides container scheduling, continuous delivery, and automated service deployment.Elastic Runtime is a runtime environment for Pivotal Cloud Foundry. An HTML injection...