16153 matches found
CMS Agencija O2 Cross Site Scripting / SQL Injection
SQL Injection & XSS on CMS Agencija O2 Risk: High CWE number: CWE-89,CWE-79 Date: 22/08/2014 Vendor: Agencija O2 Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on: Windows 8 pro & Linux Mint Vulnerable File: category.php Exploits: http://host/cms/category.php?qcatid=SQLI & X...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Mobiloud mobiloud-mobile-app-plugin plugin before 2.3.8 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in Feng Office allows remote attackers to inject arbitrary web script or HTML via a client Name field...
CVE-2012-5684
Cross-site scripting XSS vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the inFullname parameter in an UpdateAccountSettings action in the myaccount module to zpanel/...
CVE-2014-3898
CVE-2014-3898 affects Fujitsu ServerView Operations Manager (V5.00.09–V6.30.05). It is a cross-site scripting (XSS) vulnerability allowing remote attackers to inject arbitrary scripts via unspecified vectors, potentially executing in the user’s browser. Remediation guidance in connected sources a...
Cross site scripting
Cross-site scripting XSS vulnerability in Master Data Services MDS in Microsoft SQL Server 2012 SP1 and 2014 on 64-bit platforms allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "SQL Master Data Services XSS Vulnerability."...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Microcart 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO or 2 query string to admin/index.php or 3 firstname, 4 lastname, 5 cc, 6 exp, 7 cvv, 8 address1, 9 address2, 10 city, 11 state, 12 zip, 13 phone, or ...
CVE-2012-4241
Microcart 1.0 is affected by CVE-2012-4241: multiple XSS vulnerabilities on /checkout.php (first_name, last_name, cc, exp, cvv, address1, address2, city, state, zip, phone, email) and /_admin/index.php, due to unsanitized handling of input in error/page rendering. Impact could enable arbitrary Ja...
Cross site scripting
Cross-site scripting XSS vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the category parameter. NOTE: the url parameter vector is already covered by CVE-2014-5082...
MGASA-2014-0317 Updated ocsinventory packages fix security vulnerability
Multiple cross-site scripting XSS vulnerabilities in the OCS Reports Web Interface in OCS Inventory NG allow remote attackers to inject arbitrary web script or HTML via unspecified vectors CVE-2014-4722. Also, the web interface has been fixed to work with Apache HTTPD 2.4...
WordPress Shoutbox Theme - XSS
This WordPress theme is prone to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary script or HTML. Solution Update the theme...
Oxwall 1.7.0 - Multiple CSRF And HTML Injection Vulnerabilities
Oxwall version 1.7.0 suffers from multiple cross-site request forgery and stored xss vulnerabilities. The application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with...
WordPress ClickDesk Plugin <= 3.8.1 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the XS Administration Tools in SAP HANA allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-5172
Multiple cross-site scripting XSS vulnerabilities in the XS Administration Tools in SAP HANA allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Mandriva Linux Security Advisory : phpmyadmin (MDVSA-2014:143)
Multiple vulnerabilities has been discovered and corrected in phpmyadmin : Cross-site scripting XSS vulnerability in the PMAgetHtmlForActionLinks function in libraries/structure.lib.php in phpMyAdmin 4.2.x before 4.2.6 allows remote authenticated users to inject arbitrary web script or HTML via a...
CVE-2014-3025
Multiple cross-site scripting XSS vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 through 7.1.1.2, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk; and Maximo Asset Management 6.2 through 6.2....
CVE-2014-0889
Multiple cross-site scripting XSS vulnerabilities in IBM Atlas Suite aka Atlas Policy Suite, as used in Atlas eDiscovery Process Management through 6.0.3, Disposal and Governance Management for IT through 6.0.3, and Global Retention Policy and Schedule Management through 6.0.3, allow remote...
Cross site scripting
Cross-site scripting XSS vulnerability in Homepage Decorator PerlMailer 3.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...