255 matches found
CVE-2019-6726
The WP Fastest Cache plugin through 0.8.9.0 for WordPress allows remote attackers to delete arbitrary files because wppostratingsclearfastestcache and rmfolderrecursively in wpFastestCache.php mishandle ../ in an HTTP Referer header...
CVE-2019-6726
The WP Fastest Cache plugin through 0.8.9.0 for WordPress allows remote attackers to delete arbitrary files because wppostratingsclearfastestcache and rmfolderrecursively in wpFastestCache.php mishandle ../ in an HTTP Referer header...
PT-2019-18286
Name of the Vulnerable Software and Affected Versions WP Fastest Cache plugin versions prior to 0.9.0 Description The issue allows remote attackers to delete arbitrary files due to mishandling of ../ in an HTTP Referer header by the wp postratings clear fastest cache and rm folder recursively...
Cross site scripting
EmpireCMS 7.5.0 has XSS via the HTTP Referer header to e/member/doaction.php...
CVE-2019-12362
EmpireCMS 7.5.0 has XSS via the HTTP Referer header to e/member/doaction.php...
CVE-2019-12362: Improper Neutralization of Input During Web Page Generation
EmpireCMS 7.5.0 has XSS via the HTTP Referer header to e/member/doaction.php...
PT-2019-12764
Name of the Vulnerable Software and Affected Versions EmpireCMS version 7.5.0 Description The issue allows for XSS via the HTTP Referer header to the "e/member/doaction.php" endpoint. Recommendations For EmpireCMS version 7.5.0, update to a version that fixes this issue, or as a temporary...
Cross site scripting
The admin web interface on Technicolor MediaAccess TG789vac v2 HP devices with firmware v16.3.7190-2761005-20161004084353 displays unsanitised user input, which allows an unauthenticated malicious user to embed JavaScript into the Log viewer interface via a crafted HTTP Referer header, aka XSS...
Cross site scripting
Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript code via an HTTP Referer Header...
CVE-2018-18244
Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript code via an HTTP Referer Header...
CVE-2018-18244
The CVE-2018-18244 entry corresponds to a cross-site scripting vulnerability in VIVOTEK Network Camera Series. The affected component is the syslog.html page, exploitable on firmware versions 0x06x to 0x08x. An attacker can remotely inject and execute arbitrary JavaScript in the context of a user...
CVE-2018-18244: Improper Neutralization of Input During Web Page Generation
Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript code via an HTTP Referer Header...
PT-2019-9558
Name of the Vulnerable Software and Affected Versions VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x Description The issue allows remote attackers to execute arbitrary JavaScript code via an HTTP Referer Header, which is a result of cross-site scripting in the syslog.html fil...
PT-2019-11148
Name of the Vulnerable Software and Affected Versions: Technicolor MediaAccess TG789vac v2 HP version v16.3.7190-2761005-20161004084353 Description: The issue concerns the admin web interface, where unsanitized user input is displayed, allowing an unauthenticated malicious user to embed JavaScrip...
CVE-2018-8827: Improper Neutralization of Input During Web Page Generation
The admin web interface on Technicolor MediaAccess TG789vac v2 HP devices with firmware v16.3.7190-2761005-20161004084353 displays unsanitised user input, which allows an unauthenticated malicious user to embed JavaScript into the Log viewer interface via a crafted HTTP Referer header, aka XSS...
CVE-2015-9273
CVE-2015-9273 affects the WordPress plugin wp-slimstat (Slimstat Analytics) , with an XSS vulnerability exploitable via an HTTP Referer header or a related JavaScript Referer tracking field. Affected versions are prior to 4.1.6.1 . The issue is documented across multiple sources confirming a stor...
CVE-2015-9273
The wp-slimstat aka Slimstat Analytics plugin before 4.1.6.1 for WordPress has XSS via an HTTP Referer header, or via a field associated with JavaScript-based Referer tracking...
PT-2018-4582
Name of the Vulnerable Software and Affected Versions wp-slimstat aka Slimstat Analytics versions prior to 4.1.6.1 Description The issue allows for XSS attacks through either an HTTP Referer header or a field associated with JavaScript-based Referer tracking. Recommendations For versions prior to...
CVE-2015-9273: Improper Neutralization of Input During Web Page Generation
The wp-slimstat aka Slimstat Analytics plugin before 4.1.6.1 for WordPress has XSS via an HTTP Referer header, or via a field associated with JavaScript-based Referer tracking...