CVE-2018-17002

The CVE-2018-17002 entry concerns the Ricoh MP 2001 printer, where HTML injection and stored XSS are reported in the address-adding flow via the parameter entryNameIn to the CGI path /web/entry/en/address/adrsSetUserWizard.cgi. Affected software is the Ricoh MP 2001 web interface; the issue arise...

CVE-2018-17003

Affected software: LimeSurvey 3.14.7. The vulnerability is HTML Injection and Stored XSS in the appendix, triggered via the surveyls_title parameter to /index.php?r=admin/survey/sa/insert. Root cause: untrusted input in the appendix component allows injection of HTML/JS. Impact: stored XSS with p...

CVE-2018-17001

On the RICOH SP 4510SF printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

Micro Focus ArcSight Management Center Cross-Site Scripting Vulnerability

Micro Focus ArcSight Management Center ArcMC is a security management center from Micro Focus UK that centrally manages ArcSight e.g. HP ArcSight Logger, etc. deployments through a unified interface. A cross-site scripting vulnerability exists in Micro Focus ArcMC versions prior to 2.81, which ca...

LimeSurvey 3.14.7 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: LimeSurvey 3.14.7 - HTML Injection and Stored XSS Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.limesurvey.org/ Software Link : https://github.com/LimeSurvey/LimeSurvey Software : LimeSurvey 3.14.7 Product Version...

ManageEngine SupportCenter Plus 8.1.0 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: ManageEngine SupportCenter Plus 8.1.0 - HTML Injection and Stored XSS Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/support-center/ Software ...

ManageEngine SupportCenter Plus 8.1.0 Cross Site Scripting

Exploit Title: ManageEngine SupportCenter Plus 8.1.0 - HTML Injection and Stored XSS Date: 2018-09-12 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/support-center/ Software : ZOHO Corp ManageEngine SupportCente...

LimeSurvey 3.14.7 Cross Site Scripting

Exploit Title: LimeSurvey 3.14.7 - HTML Injection and Stored XSS Date: 2018-09-12 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.limesurvey.org/ Software Link : https://github.com/LimeSurvey/LimeSurvey Software : LimeSurvey 3.14.7 Product Version: 3.14.7 Vulernability Type : Command...

RICOH MP 2001 Printer Cross Site Scripting

Exploit Title: RICOH MP 2001 Printer - HTML Injection and Stored XSS Date: 2018-09-13 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link : https://www.ricoh.com.au/products/office-solutions/printers-and-copiers/mfd-black-and-white/mp-2001sp Software : RICOH...

RICOH SP 4510SF Printer Cross Site Scripting

Exploit Title: RICOH SP 4510SF Printer - HTML Injection and Stored XSS Date: 2018-09-13 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link : https://www.ricoh-europe.com/products/office-printers-fax/all-in-one-printers/sp-4510sf.html Software : RICOH Printer...

navigatecms.com XSS vulnerability

Open Bug Bounty ID: OBB-677797 Description| Value ---|--- Affected Website:| navigatecms.com Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

AVM FRITZ!OS < 6.30 Multiple Vulnerabilities

AVM FRITZ!Box devices running AVM FRITZ!OS before 6.30 are prone multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

Internet Bug Bounty: Improper handling of Chunked data request in sapi_apache2.c leads to Reflected XSS

Hey, Chunked requests can trigger xss and html injection at any end point because the APRBRIGADEINSERTTAILbrigade, bucket is getting destroyed by other handlers. Affected versions: Any OS: Any https://bugs.php.net/bug.php?id=76 Prashanths-MacBook-Pro: prashanthvarma$ nc localhost 80 POST /lol.php...

CVE-2018-16726

razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component...

CVE-2018-16726

razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component...

Design/Logic Flaw

razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component...

CVE-2018-16726

razorCMS 3.4.7 is affected by an HTML injection vulnerability: attackers can inject HTML via the homepage description in the Settings component. The issue is confirmed across multiple sources (NVD/CNVD) and is tied to the description field rather than a dedicated input validation path. The provid...

CVE-2018-16726

razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component...

IBM Campaign HTML Injection Vulnerability

IBM Campaign formerly known as Unica Campaign is a management solution from IBM in the United States used to help marketers design, execute, measure, and optimize marketing advertising. An HTML injection vulnerability exists in IBM Campaign versions 9.1, 9.1.2, and 10, which can be exploited by...

CVE-2017-1115

IBM Campaign (Unica Campaign) versions 9.1, 9.1.2, and 10 are affected by an HTML injection vulnerability. A remote attacker could inject malicious HTML that would be executed in a victim’s browser within the hosting site’s security context. The issue is documented across multiple feeds (IBM X-Fo...