16148 matches found
WordPress Plugin Google Analytics by Yoast HTML Injection Vulnerability
WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blogging sites on servers with PHP and MySQL.Google Analytics by Yoast is one of the web analytics plugins available. An HTML injection vulnerability exists i...
Cross site scripting
Cross-site scripting XSS vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.kPE allows remote attackers to inject arbitrary web script or HTML via the errorpage parameter...
Web Analytics Service Cross-Site Scripting Vulnerability
Web Analytics Service is a web analytics server. A cross-site scripting vulnerability exists in the JavaScript module of Web Analytics Service. This allows remote attackers to inject arbitrary web script or HTML code via unspecified vectors...
HTML injection in homescreen app bypassing DOM sanitizer — Mozilla
Mozilla fixed a bug in the l10n localization of the default homescreen app of Firefox OS reported by security researcher Muneaki Nishimura. Exploiting this issue requires tricking the user into bookmarking a specially crafted web page via the 'Add to home screen' functionality. As a result, an...
Drupal Block Class Module HTML Injection Vulnerability
Drupal is the Drupal community maintained by a set of free, open source content management system developed in PHP. Block Class is one of the administrator through the Block configuration interface to add CSS to any Block module . An HTML injection vulnerability exists in Drupal Block Class modul...
Symphony HTML Injection Vulnerability
Symphony is a content management system CMS developed using PHP and MySQL. The system supports search engine optimization, module extensions and more. An HTML injection vulnerability exists in Symphony version 2.6.3, which stems from the program not adequately filtering user-submitted input. When...
Bugzilla security issues
Bugzilla Security Advisory During the generation of a dependency graph, the code for the HTML image map is generated locally if a local dot installation is used. With escaped HTML characters in a bug summary, it is possible to inject unfiltered HTML code in the map file which the CreateImagemap...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF19 and 8.5.0 through CF08 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
Music Cloud 1.3 Cross Site Scripting
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : http://0day.today 0 1 + Support e-mail :...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in information popups in Foreman before 1.10.0 allow remote attackers to inject arbitrary web script or HTML via 1 global parameters, 2 smart class parameters, or 3 smart variables in the a host or b hostgroup edit forms...
Cross site scripting
Cross-site scripting XSS vulnerability in synnefoclient in Synnefo Internet Management Software IMS 2015 allows remote attackers to inject arbitrary web script or HTML via the planname parameter to packagehistory/listusagesdata...
[SECURITY] [DSA 3418-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3418-1 [email protected] https://www.debian.org/security/ Michael Gilbert December 14, 2015 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3418-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3418-1 [email protected] https://www.debian.org/security/ Michael Gilbert December 14, 2015 https://www.debian.org/security/faq -...
Debian DSA-3418-1 : chromium-browser - security update
Several vulnerabilities have been discovered in the chromium web browser. - CVE-2015-6788 A type confusion issue was discovered in the handling of extensions. - CVE-2015-6789 cloudfuzzer discovered a use-after-free issue. - CVE-2015-6790 Inti De Ceukelaire discovered a way to inject HTML into...
The vulnerability of the ColdFusion interpreter allows attackers to inject any web script or HTML code.
The vulnerability of the ColdFusion interpreter exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject any desired web script or HTML code remotely...
DSA-3418-1 chromium-browser - security update
Bulletin has no description...
Debian Security Advisory DSA 3418-1 (chromium-browser - security update)
Several vulnerabilities have been discovered in the chromium web browser. CVE-2015-6788 A type confusion issue was discovered in the handling of extensions. CVE-2015-6789 cloudfuzzer discovered a use-after-free issue. CVE-2015-6790 Inti De Ceukelaire discovered a way to inject HTML into serialize...
PHP-Fusion 'administration/robots.php' HTML Injection Vulnerability
PHP-Fusion is an open source lightweight content management system based on MySql and PHP. An HTML injection vulnerability exists in PHP-Fusion, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or...
Debian: Security Advisory (DSA-3418-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
