16149 matches found
QPR Portal HTML Injection Vulnerability
QPR Software Suite is a suite of business management and performance management products from the Finnish company QPR Software.QPR Portal is one of the portal products that provides features such as full-screen mode to introduce integrated navigation options, copy schematic location links and ope...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in datapointdetails.shtm in Mango Automation 2.4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 dpid, 2 dpxid, or 3 pid parameter...
CVE-2015-1176
Cross-site scripting XSS vulnerability in upload/scp/tickets.php in osTicket before 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the status parameter in a search action...
CVE-2015-1347
CVE-2015-1347 affects the osTicket project: a cross-site scripting (XSS) vulnerability in the file client.inc.php in versions before 1.9.5.1, exploitable via the lang parameter. The available connected documents confirm the issue and reference the fix in v1.9.5.1. Impact is remote script/HTML inj...
Vaadin Framework 6.0.0 - 6.8.7 HTML Injection Vulnerability
Vaadin Framework is prone to a SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE = "cpe:/a:vaadin:vaadin"; ifdescription...
IBM WebSphere Service Registry and Repository 7.0 < 7.0.0.5 Multiple Vulnerabilities
The version of IBM WebSphere Service Registry and Repository WSRR is version 7.0 prior to 7.0.0.5. It is therefore, affected by multiple vulnerabilities : - An unspecified DOM based cross-site scripting XSS vulnerability in the WSRR web UI. CVE-2014-6132 - WSSR web interface issues a cookie that ...
IBM WebSphere Service Registry and Repository 7.5 < 7.5.0.4 Multiple Vulnerabilities
The version of IBM WebSphere Service Registry and Repository WSRR is version 7.5 prior to 7.5.0.4. It is therefore, affected by multiple vulnerabilities : - An unspecified DOM based cross-site scripting XSS vulnerability in the WSRR web UI. CVE-2014-6132 - WSSR web interface issues a cookie that ...
MyBB 1.8.2 'usercp.php' HTML Injection Vulnerability
Binary data 8619.prm...
CVE-2014-9477
Multiple cross-site scripting XSS vulnerabilities in the Listings extension for MediaWiki allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 url parameter...
CVE-2014-9475
Cross-site scripting XSS vulnerability in thumb.php in MediaWiki before 1.19.23, 1.2x before 1.22.15, 1.23.x before 1.23.8, and 1.24.x before 1.24.1 allows remote authenticated users to inject arbitrary web script or HTML via a wikitext message...
Cross site scripting
Cross-site scripting XSS vulnerability in the preview in the TemplateSandbox extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via the text parameter to Special:TemplateSandbox...
CVE-2015-1056
Cross-site scripting XSS vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary web script or HTML via the url parameter to general/status.html and possibly other pages...
CVE-2015-1058
Multiple cross-site scripting XSS vulnerabilities in AdaptCMS 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 dataCategorytitle parameter to admin/categories/add, 2 dataFieldtitle parameter to admin/fields/ajaxfields/, 3 name property in a basicInfo JSON object to...
Multiple Input Validation Vulnerabilities in Gecko CMS
Gecko CMS is a content management system CMS based on PHP and MySQL. Gecko CMS suffers from SQL injection, cross-site scripting, and HTML injection vulnerabilities because it fails to adequately filter user-supplied input. Exploitation of these vulnerabilities allows attackers to perform...
Cross site scripting
Cross-site scripting XSS vulnerability in the server in HP Insight Control allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the Pods plugin before 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter in an edit action in the pods page to wp-admin/admin.php...
CVE-2015-1052
CVE-2015-1052 is a documented XSS vulnerability in PHPKIT 1.6.6 (Build 160014), exploitable via the result parameter to upload_files/pk/include.php. Multiple trusted sources (NVD, Red Hat, CVE listings, CNVD) reiterate that PHPKIT WCMS is affected by a stored/reflected-like XSS in the poll archiv...
Snom IP Phones has multiple vulnerabilities
Snom IP Phones is an IP phone system. Snom IP Phones suffers from multiple cross-site scripting vulnerabilities, HTML injection vulnerabilities, directory traversal vulnerabilities, command execution vulnerabilities, authentication bypass vulnerabilities, multiple cross-site request forgery...
CVE-2015-0577
Multiple cross-site scripting XSS vulnerabilities in the IronPort Spam Quarantine ISQ page in Cisco AsyncOS, as used on the Cisco Email Security Appliance ESA and Content Security Management Appliance SMA, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, a...